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SECURING RADIOLOGICAL MATERIALS: 
EXAMINING THE THREAT NEXT DOOR 


THURSDAY, JUNE 12, 2014 

U.S. Senate, 

Committee on Homeland Security 
AND Governmental Aefairs, 

Washington, DC. 

The Committee met, pursuant to notice, at 10:32 a.m., in room 
SD-342, Dirksen Senate Office Building, Hon. Thomas R. Carper, 
Chairman of the Committee, presiding. 

Present: Senator Carper. 

OPENING STATEMENT OF CHAIRMAN CARPER 

Chairman Carper. This hearing will come to order. 

A little over a year ago, the city of Boston, as we will recall, was 
struck by a tragedy during the running of the 117th Boston Mara- 
thon. Two terrorists detonated pressure cooker bombs near the fin- 
ish line. As you will recall, they killed three people; they injured 
nearly 300 more. 

The horror of this attack, which we viewed again and again on 
television, and again on the first anniversary of the attack, will 
never be forgotten, but neither will the heroism that unfolded im- 
mediately following those attacks. Police, medical personnel. Na- 
tional Guardsmen, volunteers, runners, and spectators all ran to- 
ward the blasts to provide immediate aid to the injured. These acts 
of courage and selflessness saved countless lives. 

The tragic events of the 117th running of the Boston Marathon 
remind us that we must constantly seek to counter the threats and 
anticipate the threats from homegrown terrorists and to improve 
our Nation’s ability to anticipate — and prevent — the next attack. 

Today, as we strive to improve our counterterrorism efforts, we 
have the opportunity to look back at the Boston Marathon bombing 
and ask ourselves this question: What if the attack had occurred 
differently? What if it was even more deadly? What if the pressure 
cooker bombs were not just simply bombs but dirty bombs? The 
last question is what we are going to focus on today in this hear- 
ing. 

A dirty bomb is any kind of crude explosive device that, when 
detonated, disperses radiation around and beyond the blast. If a 
dirty bomb successfully goes off, those who survive the blast can be 
exposed to harmful amounts of radiation that could cause sickness 
or even death. Moreover, a dirty bomb could render areas uninhab- 
itable for not just days or weeks or months but for years, making 
that particular weapon a highly disruptive weapon. 

( 1 ) 
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If the Boston Marathon terrorists had turned their pressure 
cooker bombs into dirty bombs, then the consequences of that trag- 
ic day could have been multiplied by an order of magnitude. I want 
us just to think about that for a minute. 

For instance, when those police, medical personnel, volunteers, 
runners, and spectators all ran toward the blast to help the in- 
jured, what if they had been unknowingly exposed to harmful 
amounts of radiological material? In many cases, this material can- 
not be seen, as we know, it cannot be smelled, felt, or tasted. In 
this hypothetical, what would have been a heroic display of courage 
and selflessness could have quickly spiraled into a far more deadly 
and disruptive situation. 

Today’s hearing will focus on how we can ensure that this hypo- 
thetical situation does not come to pass. We will focus on the threat 
of a dirty bomb and specifically examine the security of radiological 
material here in communities across our country that could be used 
to create a dirty bomb. 

Two years ago, at the request of then-Senator Daniel Akaka, a 
good friend of us all, the Government Accountability Office (GAO) 
issued a report examining the government’s efforts to secure radio- 
logical material in U.S. medical facilities. 

GAO found that in many cases this radiological material was all 
too vulnerable to theft or sabotage. Shortly thereafter, I joined Sen- 
ator Akaka and Senator Casey in requesting that GAO audit the 
security of radiological material used at construction and industrial 
sites. 

Unlike the radiological devices in hospitals that are stationary 
and large, industrial radiological sources are often found in small, 
highly portable devices, routinely used in open, populated areas. 
And we have on the poster over here an example of the kind of 
highly portable radiological device that we are talking about. ^ 

This is a radiography camera. It is a camera that is commonly 
used at constructionsites to survey pipes and foundations for cracks 
and imperfections. These cameras contain radiological material 
that, if seized by the wrong hands, could be used to help create a 
dirty bomb. This clearly is the type of portable device that a thief 
or terrorist could walk away with if they found it left unsecured. 
GAO will testify today on the security of industrial radiological ma- 
terial like this camera, but the messages from their audit are clear. 

Despite government efforts, industrial radiological sources are 
far too vulnerable to theft or sabotage by terrorists or by others 
wishing to do us harm. In fact, GAO found four cases where poten- 
tial dirty bomb material was stolen between 2006 and 2012. 

Moreover, GAO found two cases where individuals with extensive 
criminal histories were given unsupervised access to potential dirty 
bomb material. One of those individuals had been previously con- 
victed of making “terroristic threats.” 

We are going to learn more about these vulnerabilities, and I 
think we are going to learn a little bit about maybe some common- 
sense fixes from our friends at GAO. But let me just say this: We 
have to do better. We have to do better than this. And given the 
consequences of a dirty bomb, there really is no excuse for the kind 


^The chart referenced by Senator Carper appears in the Appendix on page 58. 
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of vulnerabilities identified by the Government Accountability Of- 
fice. 

If we are to protect against the next Oklahoma City bombing, the 
next 9/11, or the next Boston Marathon bombing, we need to stay 
several steps ahead of the terrorists. We must anticipate and neu- 
tralize their evolving ability to carry out terrorist plots well before 
they are ever conceived and executed. 

Today we will also hear from three agencies that play a critical 
role in securing radiological material in the United States and pre- 
venting dirty bomb attacks from occurring. 

And with that, we are going to turn to our panel, and I am going 
to make some brief introductions of each of you, and then we will 
invite you to present your testimony. And I will ask some ques- 
tions. Some of my colleagues will drift in and out; they will ask 
questions as well. And then by that time, it will be time for dinner. 
[Laughter.] 

Hopefully we will be done sooner than that. But I want to wel- 
come each of you for joining us today. Thank you for coming. 
Thank you for your preparation for this hearing and for your will- 
ingness to respond to our questions. 

The Honorable Anne Harrington is the Deputy Administrator for 
Defense Nuclear Nonproliferation for the National Nuclear Security 
Administration (NNSA). Does that fit on a business card? 

Ms. Harrington. Barely. 

Chairman Carper. Barely. That is a lot. A position you have 
held, I understand, since, what 2010. Thank you. Prior to the Na- 
tional Nuclear Security Administration, she served as the Director 
of the National Academy of Sciences Committee on International 
Security and Arms Control. She has also held positions in the State 
Department as Acting Director and Deputy Director of the Office 
of Proliferation Threat Reduction. Welcome. 

Next on our panel we have Dr. Huban — and I am going to ask 
you to pronounce your last name. Let me try it, and then I want 
you to pronounce it for us. Gowadia? Is that right? 

Ms. Gowadia. Gowadia. 

Chairman Carper. Gowadia. That is a great name. The Director 
of the Domestic Nuclear Detection Office (DNDO) at the Depart- 
ment of Homeland Security (DHS). Dr. Gowadia was appointed Di- 
rector in September 2013 after being Acting Director since 2012. 
Dr. Gowadia, welcome. I understand you served in multiple posi- 
tions at the Domestic Nuclear Detection Office since 2005, and 
prior to that worked at the Department of Homeland Security’s 
Science and Technology Directorate, the Transportation Security 
Administration (TSA), and the Federal Aviation Administration 
(FAA). 

Our next witness on this panel is Mr. Mark Satorius, Executive 
Director for Operations at the U.S. Nuclear Regulatory Commission 
(NRC), and in that role he serves as the Chief Operating Officer 
(COO) overseeing the day-to-day operations of that agency. Mr. 
Satorius joined the NRC 25 years ago as an operating licensing ex- 
aminer and then as a reactor inspector and senior project engineer. 
Mr. Satorius, a U.S. Naval Academy graduate, served as an officer 
in the U.S. Navy’s Nuclear Power Program and a nuclear-trained 
submarine officer. Thank you for that service, too. 
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Our final witness this morning is Mr. David Trimble, who serves 
as a Director of the Natural Resources and Environment group at 
the U.S. Government Accountability Office. Mr. Trimble is the pri- 
mary author of a GAO report underlining the threat presented by 
the security of domestic industrial radiological sources. In his cur- 
rent role at GAO, Mr. Trimble provides leadership and oversight on 
nuclear security and cleanup issues. Previously, he has focused on 
environmental causes, including controlling toxic substances, clean 
water, clean air issues, and the Environmental Protection Agency 
(EPA) management. Before joining GAO in 2009, Mr. Trimble 
served at the Department of State’s Political Military Affairs Bu- 
reau where he was responsible for export compliance and enforce- 
ment issues. 

Those are the introductions. I am sure they do not do justice to 
each of you, but we are delighted that you are here and that you 
are willing to help better inform this Committee, and hopefully this 
Senate, with the potential threats that face us and what we might 
do about them. 

Ms. Harrington, please proceed. 

TESTIMONY OF THE HONORABLE ANNE HARRINGTON, i DEP- 
UTY ADMINISTRATOR FOR DEFENSE NUCLEAR NON- 
PROLIFERATION, NATIONAL NUCLEAR SECURITY ADMINIS- 
TRATION, U.S. DEPARTMENT OF ENERGY 

Ms. Harrington. Thank you, Mr. Chairman, and thank you for 
giving me the opportunity to testify on the Department of Energy 
(DOE) National Nuclear Security Administration efforts to enhance 
the security of vulnerable high-risk radioactive sources in the 
United States. I would like to thank you for your continued interest 
and the interest of the Committee and its leadership on this impor- 
tant issue. I would also like to thank my colleagues from the De- 
partment of Homeland Security and the Nuclear Regulatory Com- 
mission for being constructive and indispensable partners in the ef- 
fort to reduce the risk of radiological incidents. 

The Office of Defense Nuclear Nonproliferation, which I lead, in 
conjunction with our Eederal, local, and industry partners, works 
to enhance the security of civilian radioactive materials in the 
United States and internationally. I have provided details on our 
programs in my written testimony. 

We do appreciate the comments and recommendations from the 
General Accountability Office, and we are actively implementing 
their recommendations to expand outreach to increase the number 
of program volunteers and enhance coordination with other Eederal 
agencies. 

I want to use the time allotted for my oral remarks to look at 
the path forward and at the strategic approach we are developing 
to address the challenges of securing the materials that can be 
used in a dirty bomb. 

The importance of securing high-risk radiological sources was 
highlighted at the 2014 Nuclear Security Summit when the United 
States and 22 other countries signed on to a so-called gift basket, 
committing to secure all International Atomic Energy Agency 


^The prepared statement of Ms. Harrington appears in the Appendix on page 27. 
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(IAEA) classified Category I radioactive materials at a level that 
meets or, where possible, exceeds the guidelines of the agency’s 
Code of Conduct on the Safety and Security of Radioactive Sources. 
The goal is to accomplish this by the 2016 Nuclear Security Sum- 
mit. 

The recent theft in Mexico of a truck carrying a large cobalt-60 
source demonstrates how much our own security depends on the 
quality of security outside our borders. Commitments like the ones 
implemented under the Nuclear Security Summit process con- 
tribute in a meaningful way not just to the security of individual 
countries but to our joint security. 

While we continue to proceed with implementation of security en- 
hancements for high-risk radioactive materials, several factors 
have led us to consider a new strategic approach to addressing the 
dirty bomb threat through actions that achieve more permanent 
and sustainable threat reduction. Factors that we considered in- 
clude: the large number of radioactive sources worldwide; the fact 
that we secure or retire existing sources even as new sources and 
new devices are being introduced; the long-term cost for sustaining 
security systems; the limited options for disposal of these sources; 
and the general constraints within the Federal budgets. 

The grand challenge we should consider is how we can achieve 
permanent risk reduction rather than continuing in the current 
preventive posture. Just as we have demonstrated that highly en- 
riched uranium (HEU), is not necessary for producing critical med- 
ical isotopes and that we can eliminate HEU from that technology 
cycle, can we apply the same principle to radiological sources? 

We should strive to not only further enhance security, but reduce 
the size and complexity of the overall problem and achieve perma- 
nent threat reduction by decreasing the number of sites and de- 
vices that require the high-activity radioactive materials. 

The centerpiece of this strategy is to engage in a worldwide effort 
to provide reliable non-radioactive alternatives to the highest activ- 
ity radioactive sources that pose the greatest risk or to find ways 
to reduce the amounts of material needed for a given function. 

We will need to have the engagement and active participation 
from the research, industry, and medical communities, but the po- 
tential benefits — removing the risk of a dirty bomb altogether — are 
significant. 

Considering a range of incentives for replacement where commer- 
cially viable alternatives exist is something that we are inves- 
tigating, and we are also collaborating with our research and devel- 
opment office to explore and assess technical improvements that 
could be developed and transferred to industry for commercializa- 
tion. 

We recognize, however, that we may not succeed in replacing the 
need for all sources. For example, radioactive industrial sources 
such as mobile well logging and radiography sources may not have 
an acceptable and viable alternative. In such cases we are collabo- 
rating with industry partners to develop innovative and sustain- 
able security solutions. 

We have seen that other countries are willing to go above and 
beyond international norms and standards for radiological security 
through collaboration with our programs and through commitments 
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they have made at the Nuclear Security Summit. We have also now 
seen domestically that some Agreement States have taken radio- 
logical security to a higher level. While we have an important role 
to play in this regard, we also encourage all other States to show 
the same initiative to demonstrate leadership and commit re- 
sources to take radiological security beyond minimum require- 
ments. 

Thank you for your attention, and I am happy to answer any 
questions. 

Chairman Carper. Ms. Harrington, thank you so much. Thanks 
for your testimony. Thanks for your service. 

Dr. Gowadia, would you please present your testimony at this 
time? Thank you. 

TESTIMONY OF HUBAN A. GOWADIA, PH.D.,i DIRECTOR, DO- 
MESTIC NUCLEAR DETECTION OFFICE, U.S. DEPARTMENT 

OF HOMELAND SECURITY 

Ms. Gowadia. Thank you. Good morning. Chairman Carper, and 
I would extend thanks also for holding this hearing. It is a good 
opportunity for us to appear today to present to you and discuss 
with you the Domestic Nuclear Detection Office’s efforts to prevent 
and prepare for radiological events. 

I am honored to be here today to testify with my distinguished 
colleagues. Their support and assistance are fundamental to the 
mission you have given my office. 

At the Domestic Nuclear Detection Office, we are singularly fo- 
cused on the nuclear threat and seek to make nuclear terrorism a 
prohibitively difficult undertaking for our adversaries. 

In coordination with Federal, State, and local partners, we de- 
velop and enhance the global nuclear detection architecture 
(GNDA), which is a framework for detecting, analyzing, and report- 
ing on nuclear and other radioactive materials that are out of regu- 
latory control. 

Although my office focuses on detecting and locating radioactive 
materials once they are lost or stolen, we work very closely with 
our colleagues at the Department of Energy and the Nuclear Regu- 
latory Commission who are responsible for the safety and security 
of these materials. 

Our approach to detection is based on the critical triad of intel- 
ligence, law enforcement, and technology. By ensuring intelligence- 
informed operations are conducted by well-trained operators using 
the right technologies, we maximize our ability to detect and inter- 
dict radiological and nuclear threats. 

The first leg of the triad, intelligence and information sharing, is, 
very frankly, the backbone of a robust detection architecture. Time- 
ly and accurate indicators and warnings are crucial to the deploy- 
ment of resources and operations. Additionally, we analyze past nu- 
clear smuggling cases and pertinent terrorism events and bring 
this knowledge to bear on the development of future detection ar- 
chitectures and systems. 


^The prepared statement of Ms. Gowadia appears in the Appendix on page 36. 
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The Domestic Nuclear Detection Office’s Joint Analysis Center 
enables information sharing and also provides alarm adjudication 
support and situational awareness to our stakeholders. 

To increase the awareness of lost and stolen sources, we regu- 
larly publish information bulletins for our State and local partners, 
summarizing relevant news articles with useful facts about radio- 
active materials. 

The second leg of our triad is law enforcement officers and first 
responders, those on the front lines of detection and prevention ef- 
forts. The Domestic Nuclear Detection Office works to ensure that 
they have the necessary capabilities and are well trained and ready 
for the mission. Since 2005, through many collaborative efforts, we 
have provided radiation detection training to over 27,000 Federal, 
State, and local law enforcement personnel and emergency re- 
sponders. Annually, we conduct approximately 15 exercises that 
stress operator’s abilities to detect illicit radiological and nuclear 
material while enhancing collaboration and building trusted net- 
works. 

To date, the Domestic Nuclear Detection Office has engaged with 
29 States to raise awareness of this threat, and we assist our State 
and local partners as they develop their own detection programs. 
We work with them to build a flexible, multilayered architecture 
that can be integrated with Federal assets into a unifled response 
in the event of a credible threat. By the end of 2015, we will have 
expanded these efforts to cover all 50 States. 

The Domestic Nuclear Detection Office further supports law en- 
forcement operations by providing mobile detection deployment 
units. These are desired to supplement existing local detection 
and reporting capabilities, especially in support of national and 
other special security events. 

The program was instituted in 2008, and the trailers house 
equipment for up to 40 personnel. In fact, this year on July 4, we 
will complete our 150th deployment of the mobile detection units. 

The final leg of our triad is technology. In addition to acquiring 
and deploying radiation sensors for the Department of Homeland 
Security’s operational components, we maintain an aggressive 
transformational and applied research portfolio. The Domestic Nu- 
clear Detection Office collaborates with Federal research and devel- 
opment partners as well as with industry, academia, and the na- 
tional laboratories to bring the right technologies to front-line oper- 
ators. 

Operators are always included in all of our efforts. For instance, 
we recently led the development of a next-generation handheld ra- 
dioisotope identification device. These are regularly used by law en- 
forcement and technical experts in the field. 

We work closely with our operational partners to identify key re- 
quirements for the design of the system. The final product is now 
a device that is lightweight, easy to use, more reliable, and even 
has lower life-cycle costs. With your support, we will continue such 
collaborative efforts to develop breakthrough technologies and offer 
significant operational improvements and enhance our national de- 
tection capabilities. 

Thank you again for this opportunity to discuss the Domestic 
Nuclear Detection Office’s efforts to protect our Nation from radio- 
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logical and nuclear threats. I sincerely appreciate your interest and 
support for the entire nuclear security enterprise. Your leadership 
and our collahorations will help us ensure a safe, secure, and resil- 
ient homeland. Thank you. 

Chairman Carper. Dr. Gowadia, thank you so much. 

Mark Satorius, please proceed. When you left the Navy, how 
many years had you served? 

Mr. Satorius. Five years of active duty, sir, and then 18 years 
of reserve service. 

Chairman Carper. OK. And so 18 years of reserve service, so 
that is like 23 years. 

Mr. Satorius. Yes, sir. 

Chairman Carper. That is how many years I served, 5 active, 18 
reserve. And I was a Navy P-3 aircraft mission commander, and 
our joh was to track Soviet nuclear subs. We did a lot of low-level 
missions off the coast of Vietnam, surface surveillance during the 
Vietnam War, including around those islands in the South China 
Sea where there is a big 

Mr. Satorius. Yes, sir, and you oftentimes spent time looking for 
U.S. submarines without as much success. 

Chairman Carper. No, we were not stupid enough to try to look. 
We could not find them. They were so quiet. And the way we found 
them, as you know, was through sound. But we are very proud of 
your service there, and you are a retired captain? 

Mr. Satorius. Yes, I am. I am a retired captain. 

Chairman Carper. So am I. Well, Captain, my son, Ben, calls 
me, “Captain, my captain.” [Laughter.] 

And I always say, “As you were, sailor.” So, Captain, welcome. 

TESTIMONY OF MARK A. SATORIUS, i EXECUTIVE DIRECTOR 
FOR OPERATIONS, U.S. NUCLEAR REGULATORY COMMISSION 

Mr. Satorius. Thank you, and good morning. Chairman Carper. 
I appreciate the opportunity to appear before you today on behalf 
of the U.S. Nuclear Regulatory Commission. 

Radiological source security has been, and continues to be, a top 
priority at the NRC. The NRC continues to work with the 37 
Agreement States and domestic and international organizations on 
a variety of initiatives to make risk-significant radioactive sources 
even more secure and less vulnerable. 

The events of September 11, 2001, changed the threat environ- 
ment and resulted in significant strengthening of the security of ra- 
dioactive sources. Immediately following September 11, 2001, the 
NRC, working with other Federal and State agencies, prioritized 
actions to enhance the security of radioactive sources. These initial 
actions resulted in the NRC issuing a number of security advisories 
to NRC and Agreement State licensees to communicate general 
threat information and recommend specific actions to enhance se- 
curity and address potential threats. Once NRC identified actions 
that licensees needed to take to enhance the security and control 
of risk-significant sources, the agency issued orders that imposed 
legally binding requirements on our licensees. 


^The prepared statement of Mr. Satorius appears in the Appendix on page 42. 
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In addition, as mandated by the Energy Policy Act of 2005, the 
NRC convened an interagency task force on radiation source pro- 
tection and security to evaluate and provide recommendations to 
the President and the Congress relating to the security of radiation 
sources in the United States from potential terrorist threats. This 
task force submitted its first report to the President and Congress 
in August 2006, concluding that there were no significant gaps in 
the areas of radioactive source protection and security. The second 
task force report was provided in August 2010, and the third report 
will be submitted this August. 

At a hearing on July 12, 2007, by the Permanent Subcommittee 
on Investigations of this Committee, a web-based licensing 
verification system was discussed. In an effort to better track 
transactions of radioactive material nationally, the NRC developed 
a portfolio of automated tools to verify licenses and track creden- 
tials, inspections, devices and sources, and events. This portfolio in- 
cludes: the National Source Tracking System, the Web Based Li- 
censing System, and the License Verification System. 

The NRC also ceased relying on the presumption that applicants 
for a license were acting in good faith and instead instituted a pol- 
icy by which the NRC and the Agreement States would verify the 
legitimacy of applicants when first dealing with them. We also 
issued pre-licensing guidance that includes various applicant and 
licensee screening activities and site visits to ensure radioactive 
sources will be used as intended. 

The NRC also has implemented a process called the Integrated 
Materials Performance Evaluation Program (IMPEP), to assess its 
own regional materials programs as well as those of the Agreement 
States. This program provides the NRC with a systematic, inte- 
grated, and reliable evaluation of the strengths and weaknesses of 
the respective programs, and it provides an indication of areas in 
which NRC and Agreement States should dedicate more resources 
or management attention. 

Through a significant collaborative effort between the NRC and 
the Agreement States, the agency developed a radioactive source 
security rulemaking to replace the earlier Orders and provide re- 
quirements to a broad set of licensees. This rulemaking was in- 
formed by insights gained through the implementation of the Or- 
ders. 

The resulting rule — 10 Code of Federal Regulation (CFR) Part 
37 — is an optimized mix of performance-based and prescriptive re- 
quirements that provide the framework for a licensee to develop a 
security program for risk significant materials with measures spe- 
cifically tailored to its facility. Compliance with the rule was re- 
quired for NRC licensees by March 19, 2014. Agreement State li- 
censees need to fulfill compatible requirements by March 2016. 

The NRC’s efforts in material security have not ended with the 
publication and implementation of our radioactive source security 
rule. The NRC will continue to assess its programs to ensure that 
they promote the secure use and management of radioactive 
sources. 

This concludes my remarks. Senator, and I will be happy to re- 
spond to any questions you may have. 

Chairman Carper. Captain, thanks so much. 



10 


David Trimble, GAO, nice to see you. Thanks for joining us, and 
thanks for all you guys do at GAO to help our country and us. 

TESTIMONY OF DAVID TRIMBLE, i DIRECTOR, NATURAL RE- 
SOURCES AND ENVIRONMENT, U.S. GOVERNMENT ACCOUNT- 
ABILITY OFFICE 

Mr. Trimble. Thank you. My testimony today discusses the chal- 
lenges Federal agencies face in securing industrial radiological 
sources in the United States and the steps agencies are taking to 
improve security. The potential vulnerability of radiological sources 
was highlighted last December when a truck in Mexico carrying a 
cobalt-60 source, a high-risk radiological source, was stolen. 

In our report being issued today, we examined two types of in- 
dustrial radiological sources: mobile and stationary. We found that 
both pose security challenges even when licensees follow NEC’s se- 
curity controls. 

The size and portability of mobile sources makes them particu- 
larly challenging. IAEA officials have stated that the transpor- 
tation of high-risk sources is the most vulnerable part of the nu- 
clear and radiological supply chain. NEC requirements to ensure 
security for these mobile sources provide a general framework that 
is to be implemented by the licensee. While NEC orders call on li- 
censees to secure these sources, they do not explain how to do this 
by, for example, specifying the robustness of locks that must be 
used or even that alarms be installed in trucks carrying mobile 
sources. 

While all 15 industrial radiography companies we visited met 
NEC’s security requirements, we found great variation in the secu- 
rity measures employed, with some companies using only the most 
basic of locks to secure these high-risk sources. The risk to these 
mobile sources is underscored by four incidents of theft, all after 
NEC instituted increased controls for high-risk sources in 2005. 

In addition to these thefts, we identified two instances where un- 
authorized individuals, both claiming to be State inspectors, ap- 
proached the crew while in the field. In one case, the individual 
was wearing a jacket with a logo of the State. This person gained 
access to the truck, sought detailed information about the source, 
and left with two accomplices only after the crew had made calls 
to confirm his identity. 

Eegarding stationary sources, these typically involve aerospace 
manufacturing plants, storage warehouses, and panoramic 
irradiators used to sterilize food. While all of the 33 facilities we 
visited met NEC’s general security requirements, some facilities 
still appeared to have vulnerabilities. Nine facilities had unsecured 
skylights. One facility had an exterior roll-top door that was open 
and unattended. And the wall of the cage inside where the radiog- 
raphy cameras were stored did not go to the ceiling. Another facil- 
ity had an irradiator on wheels near a loading dock that was se- 
cured with a simple padlock. 

In addition to these potential security vulnerabilities, we found 
that some well logging companies that separately secure their high- 


^The prepared statement of Mr. Trimble appears in the Appendix on page 50. 
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risk sources, did not have to comply with NEC’s increased security 
requirements. 

Licensees of both mobile and stationary sources also face chal- 
lenges in determining which employees are suitable for trust- 
worthiness and reliability certification, which is required by NEC 
before an employee is given unescorted access to high-risk radio- 
logical sources. The trustworthiness and reliability (T&E) certifi- 
cation is intended to mitigate the risk of an insider threat, which 
NNSA has stated is the primary threat to facilities with high-risk 
radiological sources. 

Under NEC’s security controls, it is left to the licensee to decide 
whether to grant employees unescorted access, even in cases where 
an individual has been convicted of a violent crime or making ter- 
roristic threats. 

About half of the 33 licensees we visited said they faced chal- 
lenges in making these determinations, and seven stated they had 
granted the T&E certification to individuals with criminal records, 
giving them unescorted access to high-risk sources. In one case, the 
individual had been arrested and convicted multiple times of as- 
sault, forgery, failure to appear in court, driving while intoxicated, 
driving with a suspended license, and twice for terrorist threats. 

Notably, the two convictions for terroristic threats were not in- 
cluded in the background information provided by NEC to the li- 
censee. According to NEC, this person was not convicted of threats 
against the United States but of making violent verbal threats 
against two individuals. 

Our report also examined the steps Federal agencies are taking 
to better secure industrial radiological sources. NNSA has a vol- 
untary program to install enhanced security measures at facilities 
containing high-risk sources, and both NNSA and DHS have re- 
search projects to help track mobile sources if lost or stolen. In ad- 
dition, at the time of our review, NEC was preparing a security 
Best Practices Guide for licensees. 

Our report includes recommendations to NEC to review and con- 
sider advising the T&E process and re-examine the regulatory gap 
that exempts some facilities from the increased security require- 
ments. 

Thank you. I would be happy to answer any questions you may 
have. 

Chairman Carper. David, thank you so much. 

I think we have a couple of photos here that have been enlarged, 
and I am going to ask, if I could, Mr. Trimble, for you to respond 
to a couple of questions. 

I think your report included in it a number of visuals that were 
especially interesting. We have taken I think three of those photos 
and put them on these large charts, and I am going to just present 
each of these three to you in sequence. I just want to ask you to 
describe the photo and the security concern that it represents. 

Here is the first one. What is the photo of?i 

Mr. Trimble. This is one of the sites we visited. This is a ware- 
house storing radiography cameras, and the potential security vul- 


^The chart referenced in the hearing appears in the Appendix on page 57. 
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nerability we identified in this is the large door that is obviously 
left open and unattended. 

Chairman Carper. All right. And what is inside that might be 
of interest to 

Mr. Trimble. Yes, these are the radiography cameras that you 
had the earlier picture of, and so the warehouse would be the cen- 
tral location where these cameras would be stored when they are 
not out in the field being used. 

Chairman Carper. Would they be inside? Could it be two or 
three, or maybe a couple dozen? 

Mr. Trimble. Yes, there could be any number of radiography 
cameras located inside, and they would be in a storage room behind 
a locked container. And so because they were in a locked container, 
they are meeting the NEC’s security requirements, notwith- 
standing the open door and the unattended nature of that door. 

Chairman Carper. OK. Any idea how many of those handheld 
devices would be required if someone who knew how to handle ra- 
dioactive materials could actually create a weapon of real concern? 

Mr. Trimble. I think I would defer to colleagues at the table 
here, but I believe one would be sufficient. 

Chairman Carper. OK. Let us look at the next photo. And what 
do we have here?i 

Mr. Trimble. This is inside one of the storage warehouses for 
those radiography cameras, but as you can see here, while there is 
a lock on the caged door, the door and the wall next to it do not 
go all the way to the ceiling. So it is a rather imperfect barrier. 

Now, again, inside of there, the radiography cameras were in a 
locked container, and that is how — notwithstanding the vulner- 
ability there they are still able to meet the NEC security guide- 
lines. 

Chairman Carper. Janet Napolitano used to be Secretary of 
Homeland Security, as you will recall, and I remember her sitting 
here at this table talking to us about border security. We were 
talking about building along the Mexican border with the United 
States a fence, or fences, and walls. I remember she said something 
to the effect of if I build a 20-foot fence, somebody will come along 
with a 25-foot ladder. Looking at this reminds me of that. 

I think we have maybe one more photo that has been enlarged 
and placed on a chart. Let us look at that, and maybe you can tell 
us about that photo. And what do we have here?^ 

Mr. Trimble. This is a picture of a skylight, and at nine loca- 
tions we visited, we identified unsecured skylights at the facilities. 
These facilities range from warehouses storing radiography cam- 
eras to scientific research facilities to large panoramic irradiators. 
So there are quite a range of facilities that had these 
vulnerabilities. 

Notably, I believe, in the NNSA program where they go in on a 
voluntary basis and beef up security. Skylights is one of the areas 
which they would target in terms of either closing the means of in- 
gress or securing the skylight. 


^The chart referenced in the hearing appears in the Appendix on page 59. 
2 The chart referenced in the hearing appears in the Appendix on page 60. 
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Chairman Carper. Can you tell us in the building where a sky- 
light exists, were the devices that we are talking about here locked 
up in a secure facility? 

Mr. Trimble. Yes. They are still meeting the NRC requirements 
because they would still be in a locked container inside the facility, 
but the skylight from our view is a potential vulnerability because 
it provides another way of getting inside the building to gain access 
to that container. 

Chairman Carper. As we all know, there are locked containers 
and there are locked containers. And some are not very secure; oth- 
ers are quite secure. Can you comment on that, please? 

Mr. Trimble. Well, we saw the radiographers transporting their 
mobile sources on trucks. Some of these trucks were secured with 
very simple padlocks. Some had high security locks, and inside 
where the radiography cameras would be stored. Sometimes people 
would just have an Army surplus container with a cable securing 
it to the truck, which provides the second lock required under the 
NRC requirements. 

Some took the mission much more seriously, bought reinforced 
steel containers and had bolted them did a a better job to secure 
those containers. 

So there is a great variability that we observed in the field. 

Chairman Carper. Let me just ask the other panelists just to 
react to what we have seen and what Mr. Trimble has said. Any 
thoughts before I ask a different question? Captain Satorius. 

Mr. Satorius. Well, Senator, I would just say that this is the 
first I have seen of these pictures. I have been made aware of 
issues that the GAO has found within their report. Being an orga- 
nization that always strives to continually improve, we have a new 
security rule, which I mentioned, 10 CFR Part 37. We will look at 
that rule and see if there are things that we need to beef up. But 
as a regulatory body, we put regulations in place that are risk in- 
formed and performance based, and we do not typically have a one- 
rule-fits-all. We leave it to the licensees to do. It is their responsi- 
bility to take our requirements and put their program into place 
and ensure that they are complying with our regulations. 

Now, we do provide with rules guidance that will instruct licens- 
ees on how they can construct and operate their program in a man- 
ner that will comply with our regulatory requirements. But we 
leave it to the licensee to put their program in place to document 
a written security plan. I would have to understand the security 
zone on some of these pictures to understand completely all the de- 
tails. But I wanted to provide that short perspective. 

Chairman Carper. OK, good. Is this an honor system that is in 
place, basically self-policing compliance? 

Mr. Satorius. No, because we also inspect these facilities, and 
where we have compliance problems, where they do not comply 
with our regulatory requirements, we have an enforcement pro- 
gram that can issue violations, civil penalties. Orders that will 
modify or revoke their license if necessary. So we have a very ro- 
bust enforcement program. And like I say, we inspect these facili- 
ties on a periodicity that aligns with the potential danger that 
might befall a member of the public if they were to be exposed. 
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Our inspection program is quite robust. I am a former inspector 
myself. It is about a year program that has formal classes that 
have to be taken and passed successfully. There are many on-the- 
job type accompaniments where you are under instruction as you 
perform these inspection activities. And then, finally, you are quali- 
fied as an inspector through an oral board. 

So it is a rigorous program, and only inspectors can perform 
these sort of reviews of licensees. 

Chairman Carper. Did you say the regulation had been updated 
recently? 

Mr. Satorius. Yes. 

Chairman Carper. Give us just a flavor for how it was changed. 

Mr. Satorius. I had mentioned in the 2005 timeframe we had 
done an assessment since 9/11 and looked at what things we need- 
ed to make regulatory requirements, and what we typically do is 
we will issue orders that modify their license and has them per- 
form certain activities. We will then take a little bit longer and go 
through the rulemaking process, which is a 2- to 3-year process, in- 
volves outreach to stakeholders and members of the public to help 
us in that rulemaking endeavor. 

And so that process took place, and we issued that regulation in 
March of this year. It involves, as you have heard, a background 
check to ensure that individuals that are allowed to have access by 
themselves, that they are trustworthy and reliable. The licensee 
performs that review and makes the determination as to whether 
the individual is trustworthy and reliable. 

We also have issued a guidance document of best practices for 
performing these type of reviews so that the individual that is re- 
sponsible for making that call has guidance on what to look for and 
what the other thing that it requires is liaisoning with local law 
enforcement so that you have a plan that if in the course of the 
required detecting and assessing and responding to the potential 
theft of a source, you have to lay out a plan with local law enforce- 
ment so that they can respond. They are required to inform the 
NRC — they call the local law enforcement first, and they are re- 
quired to call us as soon as they are done with that so we get early 
notification so that we can outreach to our Federal partners to 
make sure that this lost or stolen source has actually been ab- 
sconded with and 

Chairman Carper. OK. 

Mr. Satorius. Those are some of the things. 

Chairman Carper. Can you give us some idea how often these 
reports to police and to the NRC come in for devices that are miss- 
ing or are believed to be stolen? 

Mr. Satorius. I would say several a month, and the vast major- 
ity of those, all but — since 2005 — I am sorry. 2010, 2011, 2012, and 
2013, there has been no Category I source lost or stolen. For Cat- 
egory II sources 

Chairman Carper. Give us some idea what a Category I is as op- 
posed to a Category II, please. 

Mr. Satorius. Yes. The IAEA standards and their Code of Con- 
duct identifies Category I sources as, if not safely managed or se- 
curely protected are likely to cause permanent injury to a person 
who handled them or were otherwise in contact with them for more 
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than a few minutes, it would probably be fatal to be close to this 
amount of unshielded material for a period of a few minutes to an 
hour. And these sources are used in irradiators, and they are very 
strong sources. They tend to be cobalt-60. 

And Category II is one step down from that, where if you were 
in close contact to it for an hour or two, there would be serious in- 
jury and possibly a fatality. 

Chairman Carper. I would assume that for Category I devices 
that the level of risk would be higher. 

Mr. Satorius. Yes. 

Chairman Carper. And the requirement for securing the device 
would be greater, and maybe even inspections would occur more 
often. Give us some idea how often inspections would occur for 
these different categories. 

Mr. Satorius. Annually for Category I sources. 

Chairman Carper. And for the other categories? 

Mr. Satorius. It varies. Some have a periodicity of every 2 years 
or every 3 years, depending upon the strength of the material and 
its potential to harm members of the public. And I will say also for 
Category I sources. Part 37, the new rule, requires that anytime 
the source is removed from its storage container, it sets off an 
alarm. So that is a new requirement that was in Part 37. 

Chairman Carper. And is that for Category I devices? 

Mr. Satorius. Yes. 

Chairman Carper. OK. Let me just ask our panelists, would you 
just comment on the rule that Captain Satorius just described? 
What should we be encouraged by, maybe concerned about? Please, 
any of you. David. 

Mr. Trimble. Well, as we note in our report, our site visits were 
assessing the current rules. Part 37 did not kick in for NRC-led 
States until this year, and it will not roll out for States until 2016. 

What I would highlight, however, is that many of the problems 
that were identified in our report I do not believe would be ad- 
dressed. For example, the issue of collocation where some sites are 
able to not be subject to the security requirements because they are 
separately stored; therefore, they are not totaled up to hit the regu- 
latory threshold that triggers the requirements for enhanced secu- 
rity. I do not believe that is addressed. 

I do not believe that some of the specificity that we have talked 
about in terms of types of locks for Category II sources is ad- 
dressed. 

And then the issue about trustworthiness and reliability certifi- 
cations and the process by which that is done I do not believe is 
addressed. 

So the decision is still being left to the licensee, and there is no 
process which — or criteria that would disqualify someone from 
being given such a certification. There is no process by which, say, 
for example, say you had a conviction or a red flag that would trig- 
ger greater NRC involvement. 

Chairman Carper. Ms. Harrington or Dr. Gowadia, would you 
just react to what Mr. Trimble just said? 

Ms. Harrington. I would like to take perhaps one of his points 
just very briefly, actually one of Mr. Satorius’ points, which is the 
coordination, and I think this is one of those places where we can 
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play a special role and do, along with NRC and DHS. Reaching out 
to law enforcement can often he very complicated. There are many 
different layers. You might he in a tribal area. It might he a uni- 
versity campus with its own security police. It could he an environ- 
ment where you have local county and State police. 

So part of what we do collahoratively to go a hit above and be- 
yond what is in the actual rule is to organize tabletop exercises 
that involve all elements of the community. These exercises really 
help bring together the different elements of the community that 
would be involved in response to any kind of incident. And so far 
in collaboration with our colleagues at the Department of Energy 
who do counterterrorism and counterproliferation, we have run 
well over 100 of these exercises all over the United States in com- 
munities — 

Chairman Carper. How often? Like in a year or what? 

Ms. Harrington. Several a year, usually. But we have found 
that the feedback from this kind of exercise is extremely positive. 
But if you were to try to regulate that sort of exercise, I am not 
sure exactly how you could do it. But this is one of the steps by 
looking together at how we can collahoratively improve the security 
posture, we have come up with some approaches like this that I 
think we feel are a very positive contribution to the overall secu- 
rity. 

Ms. Gowadia. Speaking for the Domestic Nuclear Detection Of- 
fice, sir, I could tell you that the collaboration one is very critical 
because the trusted networks by virtue of these exercises and all 
the work we do in our trilateral meetings, in our Government Co- 
ordination Council, et cetera, they help us build an ability to get 
the early indicator, the early warning, so that the law enforcement 
assets with the detection capabilities can respond and help find the 
lost or stolen sources. 

So we certainly support the regulatory work at the NRC and ad- 
ditional work that Administrator Harrington just mentioned, be- 
cause it definitely enables our end of the mission spectrum, the de- 
tection, the find, fix, and locate piece. 

Chairman Carper. How do the safeguards that have been de- 
scribed here this morning, how do they compare with safeguards 
that are in place in other countries around the world where they 
have whether it is radiography cameras or other devices, even med- 
ical radioactive materials? How does our work compare with that 
of other countries? 

Ms. Harrington. This really is a global challenge, and I think 
to the credit of the countries involved in the Nuclear Security Sum- 
mit process, they really have brought radiological security to the 
fore since the 2012 summit when it was added to the list of active 
targets for collaboration. I mentioned in my testimony that at the 
2014 summit the United States and 22 other countries made a 
commitment that by the time of the 2016 summit, we would have 
taken steps to secure all Category I sources. So that now is on our 
collective plates in the United States to deliver that to the 2016 
summit, and we will work collahoratively with other countries. 

But I would venture to say that the photographs that we saw 
here today could reasonably represent similar challenges within 
the international community. In fact, I was at a conference in 
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southern Africa earlier this year, and as you know, very rich in 
natural resources, and the countries are extremely worried about 
the dirty bomb threat because of the number of sources, the lack 
of regulation, lack of secure procedures, lack of a strong inde- 
pendent regulator to provide a framework. And so we will work 
with those countries collaboratively to try to help them improve 
their profile. 

Chairman Carper. OK. When I was Governor of Delaware for 8 
years, I was very much involved in the National Governors Associa- 
tion (NGA), which had a clearinghouse for good ideas. I remember 
many cabinet meetings presiding over with our cabinet when we 
were discussing a particular challenge in our State, saying to my 
cabinet, “Some other State has faced this challenge, and they have 
figured it out, and they are the gold standard.” We had, as I said, 
in the National Governors Association this clearinghouse for good 
ideas, and we had the ability to find out what other State had ad- 
dressed this satisfactorily, who the contact people were, how to get 
in touch with them, and it was actually very helpful in many in- 
stances. 

Do we have that kind of capability with maybe looking — I do not 
know if we would look from State to State, but if not from State 
to State to see who has the best practices in this regard, or maybe 
from country to country who has the best practices? Maybe it is us. 
But could you all speak to that, please? 

Mr. Satorius. I can start. Senator. 

Chairman Carper. Please. 

Mr. Satorius. And I will speak from an Agreement State per- 
spective where we have 37 States within the United States that 
have signed an agreement — the Governor has signed an agreement 
with the Chairman of the NRC where we first — where they want 
to take over the responsibilities for the safety and security of cer- 
tain radioactive sources. And we have a process that we review 
their program and ensure that it has the right staffing, the right 
training. 

Chairman Carper. Excuse me. Why would a State want to take 
over that responsibility? 

Mr. Satorius. Many reasons. The principal one that I hear is 
that we charge fees for licenses and for doing our regulatory activi- 
ties. We are a 90-percent fee-recoverable agency. And so we charge 
fees. They oftentimes can do it for less money, so it is kind of a 
service to their constituents where they are able to provide those 
industrial users or medical users the use of these sources safely 
and compliant with our requirements at less cost to their citizens. 

Chairman Carper. OK. Others on the issue of compliance and 
best practices, whether it is within this country or outside of this 
country, please? 

Ms. Harrington. Well, you mentioned Senator Akaka before, 
and I had the honor to testify before him several years ago, and 
he was truly a leader in this area and worked very hard with 

Chairman Carper. What do you suppose inspired him? 

Ms. Harrington. I am not sure. I would ask my team, especially 
Ioanna Iliopulos, who runs this program for us, she worked very 
closely with the Senator and with the State of Hawaii to bring 
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them into full compliance with all regulations and, as far as I 
know, they were the first State to do that. 

Chairman Carper. OK. Ioanna, can you step a little closer to the 
microphone, please? If you can just take a moment, then we let you 
escape to your seat. 

Ms. Iliopulos. Thank you. 

Chairman Carper. Would you just say your name, please? 

Ms. Iliopulos. Yes. My name is Ioanna Iliopulos, and I work for 
NNSA, and I run the domestic program. 

Chairman Carper. Ioanna Ilopulos? 

Ms. Iliopulos. Iliopulos. 

Chairman Carper. Thank you. There you go. 

Ms. Iliopulos. I think the Senator was truly a visionary and 
cared about a lot of post-September 11 threats, and there were a 
lot of indicators in the early days post-September 11, and intellec- 
tually had talked to other Congressmen and Senators on this issue 
and requested that the GAO look into the area. And I think with 
GAO’s audits, which were somewhat painful, on Federal programs 
but I think in the end raised the visibility of some of the 
vulnerabilities we have both domestically and internationally. And 
he was a clear advocate of it can be done in my State, I have med- 
ical facilities, I have USDA irradiators, I have a Navy base, I have 
a lot of things right in my own back yard, if it can be done in my 
State and we can increase the security posture, that could serve as 
a model going forward with other States. 

So it was a push on our part. We did not solely focus on Hawaii. 
We focus on major metropolitan areas and other States across the 
country on a voluntary basis, but his foresight and his advocacy on 
this issue clearly articulated the need for others to step up and 
step forward. 

Chairman Carper. All right. Thank you very much. Mr. Trimble. 

Mr. Trimble. I would just add that previously GAO has done 
some work in this area. We looked at the issue of orphan sources, 
and we looked at how they were handling this issue in France, and 
they had some innovative ideas. We have not looked at the cross- 
organizational sharing aspect per se, but we have done some work 
overseas to look at how other countries have tackled some of these 
issues. 

Chairman Carper. I guess it would be understandable that if 
other nations have these devices that have radioactive materials in 
them, whether they are mobile or stationary, and if other countries 
do not secure them well and those materials were obtained, they 
could be used for bad purposes in those countries or maybe any- 
where. What do we have to reduce the likelihood that if another 
country did not secure their radioactive materials well, what assur- 
ances do we have with the way we protect our own borders and our 
ports of entry that we will be able to detect or intercept any of that 
material coming in? Dr. Gowadia. 

Ms. Gowadia. Yes, thank you. Senator, for that question. At 
DHS we believe in a multifaceted, layered approach to our security. 
So this begins well overseas. In my office, the Domestic Nuclear 
Detection Office, we work very closely with the International Atom- 
ic Energy Agency so that we can promulgate best practices across 
the globe. All 159 member States now have access to best practice 
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guides on building national architectures, exercising, training, and 
awareness, and we are even beginning to teach some of the courses 
at the International Law Enforcement Academy. So that is our first 
outreach. 

We also work with partner nations certainly to encourage them 
to have layered approaches within their nations. I guess as I go 
through my answer you will see me building layer after layer after 
layer so that we can make nuclear terrorism a harder and harder 
undertaking for the adversary. 

We use information such as manifest data to focus our overseas 
scanning efforts, and then certainly collaborate with our Intel- 
ligence Community partners so that we can get the early indica- 
tors, the early intelligence warnings, and surge our assets as nec- 
essary. 

At the borders itself, we have very robust capabilities, almost 100 
percent of our containerized cargo is scanned at our seaports; 100 
percent of vehicular traffic that comes across our land borders at 
our ports of entry get similarly scanned. We have well-trained law 
enforcement officers in Customs and Border Protection (CBP) and 
United States Coast Guard (USCG). Every boarding party in the 
United States Coast Guard carries detection equipment. All incom- 
ing general aviation flights are met by Customs and Border Protec- 
tion officers who have the right equipment and scan the incoming 
aircraft. These are just some of the examples I can think of 

And, of course, with your continued support, we will continue to 
make the right investments and appropriately balanced capabilities 
to build strength after strength at our borders and with our inter- 
national partners. 

Chairman Carper. Well, to be honest, all that is actually encour- 
aging, and so we are grateful for the work that is being done. I like 
to say everything I do I know I can do better. Sometimes I say the 
road to improvement is always under construction. And just give 
us some examples of what we are doing better today than maybe 
what we were doing in the not too distant past, and maybe mention 
a couple of areas where we can do better still. This would be for 
you and for others as well. 

Ms. Gowadia. I guess I will start. One of the things we do better 
today is inform our efforts based on a more holistic look at the risk. 
My office is responsible for coordinating the global nuclear detec- 
tion architecture and implementing its domestic component. So in 
these fiscally constrained days, we have to balance our resources 
to get the maximum bang for the buck, so we are now analyzing 
risk-informed schemes, building better feeds from information so 
that our mobile, agile architecture can be more responsive to a 
credible threat. So that is something we are doing better. 

I could not agree with you more. Senator, no matter what we are 
doing, we can always do something better, a lot better. And with 
the adversary being adaptive, we have to continue to grow and stay 
ahead of their capabilities as well. 

You heard the Administrator talk about exercising. Illicit nuclear 
materials are not something a law enforcement officer sees on a 
day-to-day basis, so we must practice. We must keep our skills up 
to speed, and we do that with some of our field exercises where we 
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use uncommon sources to expose our officers to things they do not 
see on a normal basis. 

These are some of the activities. Integrated exercising I think is 
something we can do better moving forward. And our communica- 
tions coordination function always can be better. 

Chairman Carper. Anyone else? Ms. Harrington. 

Ms. Harrington. So Dr. Gowadia mentioned the global nuclear 
detection architecture. There was a White House review of GNDA 
last year, and within the context of that review, some very specific 
areas for the programs that we run at the Department of Energy 
were identified as necessary to fill certain gaps. For example, our 
second line of defense program works very carefully and closely 
with DHS. We install radiological detection devices in ports where 
there is a lot of outgoing cargo traffic to the United States. So we 
try to catch things before they even are headed to the United 
States, and we are particularly interested in nuclear material. But 
radiological sources are also a very big concern, and a large num- 
ber do get caught through this system, identified, isolated, and 
then handled appropriately. 

Also internationally, since 2004 — and we just actually celebrated 
the 10-year anniversary of our Global Threat Reduction Initiative 
(GTRI) — we have done an enormous amount of work internation- 
ally to both secure sources, identify disposition pathways, work 
with countries to develop best practices, work on an international 
code of conduct for the security of radiological sources. This is an 
extremely active area of programming for us and one where we will 
continue to be extremely active. 

I think one of our biggest accomplishments was first identifying 
and then retiring the radiological thermoelectric generators (RTGs), 
used by Russia to power lighthouses in very remote locations and 
so forth. These were massive sources, and one of them could have 
been used for many dirty bombs. So that was a huge accomplish- 
ment over multiple years. But we have had similar kinds of work 
going on across the globe for the last decade. 

Mr. Satorius. Senator, I would just add that one of the things 
we are doing better today that we were not doing in the past has 
to do with our source security rulemaking that I mentioned earlier. 
There are six focus areas within that rulemaking that makes it a 
more effective rule, and that includes, as I think I had mentioned, 
background checks, including FBI fingerprinting, to help ensure 
that individuals who are allowed next to sources, can do so 
unescorted, controlling personnel access where risk-significant 
sources are being stored, documenting security programs. In other 
words, a written security program that lays out how the licensees 
will safeguard these sources, coordinating with local law enforce- 
ment to have a plan in place in case there is theft or diversion, and 
coordinating and tracking radioactive source shipments such that 
if they become lost during shipment, there is a manner to be able 
to find them. 

Chairman Carper. OK, good. 

Mr. Trimble. I would add just one 

Chairman Carper. Mr. Trimble. 

Mr. Trimble. I think the international efforts we have discussed 
today in terms of protecting the country highlight in an indirect 
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way the importance of the issues we bring up in our report, be- 
cause as those pathways become more and more difficult for any- 
one to navigate, the easiest path is domestic. Why try to bring 
something in from overseas if you can just go to the local hospital 
or go to the warehouse to get the source? So this underscores the 
importance of making sure the NRC requirements for domestic 
medical and industrial users are robust, and the weaknesses we 
identified are addressed. The points I would highlight in terms of 
where we can do better. Specifically should be looking at the defini- 
tion of “collocation” so that all vulnerable facilities are subject to 
the regulations, improving how we do background checks, giving 
better guidance on who should and should not be given such access, 
examining whether NRC should be playing a bigger role in that 
process and providing more specific guidance to companies and li- 
censees who are not security professionals. These are commercial 
companies doing a business. They may have some health and 
science background, but they are not security professionals, so they 
need some more help than what we are giving them right now. 

Chairman Carper. OK, good. Let us go back to those radiog- 
raphy cameras. Before, one of the questions I had asked is: Are 
they Category I or Category II? 

Mr. Satorius. They are Category II, and they have a source that 
needs to be replenished fairly often because of its half-life. 

Chairman Carper. OK. What would be “fairly often”? Every year 
or two? 

Mr. Satorius. About every 3 months. 

Chairman Carper. OK. That is fairly often. All right. 

Are we aware of any effort to actually mount an attack using a 
dirty bomb in this country or another country? Are we aware of 
whether someone has actually attempted, much like in Boston 
where we had the effort, unfortunately successful, to use pressure 
cookers to hurt and kill and maim a lot of people? We have seen 
the use of a substance in the air to poison, try to kill people in sub- 
ways, so we have actually demonstrated uses of technology to hurt 
people. Do we have any documentation about attacks either in this 
country or in other countries where this was actually tried, maybe 
failed, maybe aborted? 

Mr. Satorius. I do not, sir. There is the general threat that we 
make every effort to safeguard against. I am not sure if my col- 
leagues are aware of any attempts to produce a dirty bomb using 
our sources? 

Ms. Harrington. If you want to followup with a classified brief- 
ing on the topic, we could go into that in more detail. 

Chairman Carper. OK. Good enough. And I am going to ask a 
follow-on question, and if it is one that is not appropriate to answer 
in this space, just say so. But people can go on the Internet and 
learn all kinds of things, including how to build weapons, and nu- 
clear weapons, pressure cooker bombs, and I presume dirty bombs. 

Given the access to that kind of information, why do you suppose 
no one has done it, at least to our knowledge — and they have cer- 
tainly not been successful in doing it. And maybe it is because of 
the security measures that we are talking about in this country are 
pretty good, getting better. Maybe it is because that is true in other 
countries. Maybe it is not as easy as it sounds to do, and maybe 
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people just decided that it is too dangerous and they are going to 
hurt or maim other people, they maybe find some way to do it that 
is less damaging to the perpetrator, although a lot of them do not 
really seem to care about whether or not they live or die. But why? 
Why do you suppose we have not seen it attempted more? Mr. 
Trimble. 

Mr. Trimble. I will just jump in to start the conversation. I 
think the efforts of NNSA, DHS, and NRC deserve credit for all 
they have done to try to secure these sources. I think where the 
conversation is going is: Is there more that we can do, though? And 
that is really where our report is coming from, and really it is just 
premised on the idea that it only takes one to make a really bad 
day. 

Chairman Carper. Others, please? 

Mr. Satorius. Just quickly, I would like to say that I believe 
some of the efforts that we have taken in putting together regu- 
latory programs as well as other programs, that is certainly one of 
the drivers. We have made it very hard for people to get their 
hands on these things. 

Chairman Carper. Doctor. 

Ms. Gowadia. Senator, I would echo a lot of what you said and 
what we have heard today, but in a different setting, I think we 
can go into more specifics. 

Chairman Carper. OK. Ms. Harrington. 

Ms. Harrington. I support Dr. Gowadia’s statement about tak- 
ing this up in a different environment. 

Chairman Carper. OK. Fair enough. 

Captain Satorius, let me go back to you. Let me just ask, does 
the NRC have any mechanisms to immediately review unescorted 
access decisions made by licensees? For instance, if a licensee 
grants unescorted access to an individual with a violent criminal 
history, will the NRC be immediately made aware of this action 
and will it be able to take immediate action? 

Mr. Satorius. We would be able to inspect it at our next sched- 
uled inspection activity. That is when we review the decision- 
making by the licensee staff on trustworthiness and reliability. 

Chairman Carper. Mr. Trimble, do you want to react to that? 

Mr. Trimble. My understanding of the guidelines, though, is 
that what is being reviewed is that the various factors were consid- 
ered, but the actual decision is left to the licensee. So there is still 
no prohibition that if someone has convictions for certain things, 
they are not allowed to have access. 

Chairman Carper. Does that sound satisfactory? Should we be 
concerned about that, ladies? 

Ms. Gowadia. So I would respectfully defer to my regulatory col- 
leagues on Director Satorius’ position. I support and advocate for 
this mission because, again, the more secure these sources are, the 
easier it becomes for the detection end of things. 

Chairman Carper. OK. Do you think it would be helpful, again, 
Mr. Satorius, to require that the licensee get a second opinion from 
their respective State or the NRC regarding the trustworthiness of 
an individual? 

Mr. Satorius. Well, Senator, I do not think it would, and the 
reason is, as a regulatory body, we expect our licensees to perform 
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these activities. We give them good guidance that they can follow 
and so that they will repeat the right decisions. But I would say 
that it is not within our purview to be consultants. We review what 
the licensee has done and make a decision on whether they comply 
with our regulations. 

Chairman Carper. In any of your regulations, does the NRC ex- 
pressly prohibit licensees from granting unescorted access to indi- 
viduals previously convicted of making, for example, terroristic 
threats? 

Mr. Satorius. They do not. 

Chairman Carper. OK. Maybe one more question, and then we 
will wrap up. We are going to start voting in just a few minutes. 
This would be one for Ms. Harrington and for Captain Satorius. 
This is on security enhancement. I understand that the National 
Nuclear Security Administration’s Global Threats Reduction Initia- 
tive works with the Nuclear Regulatory Commission, licenses 
State, local, and tribal governments and other Federal agencies to 
build on the existing regulatory requirements by providing vol- 
untary security enhancements. Let me just ask you. Administrator 
Harrington, how many security enhancements has the National 
Nuclear Security Administration put into place on industrial and 
construction facilities? And a followup would be: What obstacles 
stand in your way from installing some form of security upgrades 
for all high-risk radiological sources? 

Ms. Harrington. I do not know if these numbers break out 
strictly the industrial facilities, but according to our analysis, there 
are approximately 3,000 buildings in the United States containing 
high-risk radiological sources. Of that number, we have already 
worked in 650 buildings providing our security upgrade program, 
and we intend to complete another 45 in this fiscal year. So that 
is, I think, a reasonable accomplishment, but that only gets us up 
to 700 out of 3,000. 

We have also recovered 

Chairman Carper. What about the other 2,300? 

Ms. Harrington. Well, those are in out-year plans, but with the 
budget environment as it is, we have had to extend the target date 
for completion farther than we had originally thought would be 
possible. 

The other part of this is the disposition pathway for these 
sources, and that is often a challenge because you either have to 
find a secure storage facility for long-term storage or, some other 
way to safely dispose of those sources. It is the licensee’s responsi- 
bility to do that unless the source that they have has no clear dis- 
position pathway, in which case we can step in and assist. 

Chairman Carper. OK. Mr. Satorius, if you have something to 
add, feel free to do so briefly. Otherwise, I am going to bring this 
to a close for now. Anything else you want to add there on this 
point? 

Mr. Satorius. Not on this point. I think my colleague has said 
it very carefully. 

Chairman Carper. OK. 

Mr. Satorius. These are enhancements, and we believe that 
compliance with our regulations provide adequate protection for 
the public. 
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Senator, I do need to correct one statement I made earlier for the 
record, if I could do that very quickly. 

Chairman Carper. Sure. 

Mr. Satorius. That is, not all Category I sources are inspected 
on a yearly basis. The periodicity of the inspection is based on the 
safety and robustness of the device, and some Category I sources 
are scheduled for periodic inspections at a greater periodicity than 
1 year, at 3 years, 4 years, 5 years. 

Chairman Carper. Good. Thanks for that clarification. 

Let me just say as we come to a close, our job in this Committee 
is to do oversight. We have the responsibility of oversight for the 
Department of Homeland Security. We also have broad responsi- 
bility or oversight for the whole Federal Government. And other 
committees have subcommittees that are responsible for investiga- 
tions. Some of them take it seriously; others do not. But it is hard 
for one Committee such as this one to really exercise meritorious 
oversight over the entire Federal Government, like we have 15, 16 
people, and as good as we are, and our staffs and all, it is just a 
little bit too much for us to handle. But one of the things we can 
do from time to time is partner with the GAO and ask them from 
time to time to look at particular issues, in this case threats, and 
ask the question: How are we doing? What are we doing well? 
Maybe what are others in other countries doing even better that 
we can learn from, or even particular States? 

I hope and pray that the subject of today’s hearing is something 
that will just always be the subject for a hearing or for speculation 
and that nobody is ever going to be hurt or inconvenienced in any 
way because of an attack of this nature. You never know. And what 
we can do is try to make sure that we are doing everything we can 
to hope for the best and prepare for the worst. And I am encour- 
aged today to hear that there is a fair amount of work going on 
to protect our people and to share that information with other na- 
tions so that they can better protect their own folks. But I certainly 
do not want to hear someone ever ask the question: Why didn’t 
somebody do something about this threat of a dirty bomb? Why 
didn’t somebody do something to protect against it? And I want us 
to be able to say, well, we have worked hard in order to protect our 
people and our country from a threat of this nature. 

So as I said earlier, everything I do I know I can do better. I 
think that is true of all of us, and that is true of every Federal pro- 
gram. And so our goal is perfection — probably hard to reach, but 
it is a pretty good goal for us. 

So I will conclude by saying how much we appreciate not just 
your being here, not just preparing for the hearing, not just an- 
swering my questions, but also we appreciate very much the work 
you do for our country. Thank you for your service to our Nation. 

The hearing record will remain open for 15 days — that is until 
June 27 at 5 p.m. — for the submission of statements and questions 
for the record, and, again, our thanks to each of you, and to our 
majority and minority staff, for helping us prepare for this hearing. 

Thank you so much, and with that this hearing is adjourned. 

[Whereupon, at 11:55 a.m., the Committee was adjourned.] 
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Opening Statement of Chairman Thomas R Carper 
“Securing Radiological Materials: Examining the Threat Next Door” 
June 12, 2014 


As prepared for delivery: 

A little over a year ago, the city of Boston was struck by a tragedy during the running of 
the 1 1 7th Boston Marathon. Two terrorists detonated pressure cooker bombs near the 
finish line, killing three and injuring nearly 300. 

The horror of this attack will never be forgotten, but neither will the heroism that 
unfolded immediately afterv^'ards. These acts of courage and selflessness saved countless 
lives. 

Police, medical personnel, National Guardsmen, volunteers, runners and spectators all ran 
towards the blasts to provide immediate aid to the injured. These acts of courage and 
selflessness saved countless lives. 

The tragic events of the 1 17lh Boston Marathon remind us that we must constantly seek 
to counter the threats from homegrown terrorists and to improve our nation’s ability to 
anticipate — and prevent ~ the next attack. 

A dirty bomb is any kind of crude explosive device that, when detonated, disperses 
radiation around and beyond the blast. If a dirty bomb successfully goes off, those who 
survive the blast can be exposed to harmful amounts of radiation that could cause 
sickness or even death. Moreover, a dirty bomb could render areas uninhabitable for 
many years, making it a highly disruptive weapon. 

If the Boston Marathon terrorists had turned their pressure-cooker bombs into dirty 
bombs, then the consequences of that tragic day could have multiplied by an order of 
magnitude. Think about that for a minute. 

For instance, when those police, medical personnel, volunteers, runners and spectators all 
ran tow'ard the blast to help the injured, they could have been unknowingly exposed to 
harmful amounts of radiological material. In many cases, this material cannot be seen, 
smelled, felt, or tasted. In this hypothetical, what would have been a heroic display of 
courage and selflessness could have quickly spiraled into a far more deadly and 
disruptive situation. 

Today’s hearing will focus on how we can ensure that this hypothetical situation never 
comes to pass. We will focus on the threat of a dirty bomb and specifically examine the 
security of radiological material here in communities across the country that can be used 
in a dirty bomb. 
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Two years ago, at the request of Senator Daniel Akaka, the Government Accountability 
Office (GAO) issued a report examining the government’s efforts to secure radiological 
material in U.S. medical facilities. 

GAO found that in many cases, this radiological material was all too vulnerable to theft 
or sabotage. Shortly thereafter, I joined Senator Akaka and Senator Casey in requesting 
that GAO audit the security of radiological material used at construction and industrial 
sites. 

Unlike the radiological devices in hospitals that are stationary and large, industrial 
radiological sources are often found in small, highly portable devices, routinely used in 
open, populated areas. GAO will testify today on the security of these industrial 
radiological materials, but the messages from their audit are clear. 

Despite government efforts, industrial radiological sources are far too vulnerable to theft 
or sabotage by terrorists or others wishing to do us harm. In fact, GAO found four cases 
where potential dirty bomb material was stolen between 2006 and 2012. 

Moreover, GAO found two cases where individuals with extensive criminal histories 
were given unsupervised access to potential dirty bomb material. One of those 
individuals had been previously convicted of making “terroristic threats.” 

We will learn more about these vulnerabilities and what I think are some commonsense 
fixes from GAO, but let me just say this: we must do better. Given the consequences of a 
dirty bomb, there really is no excuse for the vulnerabilities identified by GAO. So I’ll 
say it again, we must do better.” 

If we are to protect against the next Oklahoma City bombing, the next 9/1 1 or the next 
Boston Marathon bombing, we must stay several steps ahead of the terrorists. We must 
anticipate and neutralize their evolving ability to carry out terrorist plots well before they 
are ever conceived. 

Today, we will also hear from three agencies that play a critical role in securing 
radiological material in the U.S. and preventing dirty bomb attacks from occurring. 

m# 
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Statement of Anne Harrington 

Deputy Associate Administrator for Defense Nuclear Nonproliferation 
National Nuclear Security Administration 
U.S. Department of Energy 
Before the 

Senate Homeland Security and Government Affairs Committee 
June 12, 2014 


INTRODUCTION 

Mister Chairman, Ranking Member Cobum and distinguished members of the Committee, thank 
you for giving me the opportunity to testify on the Department of Energy National Nuclear 
Security Administration (NNSA) efforts to enhance the security of vulnerable high-risk 
radioactive sources in the United States. I would like to thank you for your continued interest 
and leadership on this important issue of securing vulnerable radioactive sources. I would also 
like to thank my colleagues from the Department of Homeland Security and the Nuclear 
Regulatory Commission for being constructive and indispensable partners in the effort to reduce 
the risk of radiological incidents. 

SCOPE AND THREAT 

When President Obama launched the Nuclear Security Summit series in 2010, the primary focus 
was on permanent risk reduction through the elimination of Highly Enriched Uranium (HEU) 
and plutonium. In the wrong hands, these materials could be used in an improvised device that 
would have catastrophic impact. As you know, the United States, working in concert with other 
countries has made very significant progress in this area. For instance, these efforts have 
resulted in the removal or disposition of more than 2,600 kilograms of HEU and plutonium since 
2010, more than enough material for 100 nuclear weapons, which includes the removal of all 
HEU from eight countries. Although we still have large amounts of both HEU and plutonium to 
remove or secure worldwide, we have for years also engaged in parallel efforts to secure high- 
risk radioactive sources. 

One of the missions of NNSA’s Office of Defense Nuclear Nonproliferation (DNN) is to reduce 
and protect vulnerable nuclear and radioactive material at civilian sites worldwide, primarily 
through the Global Threat Reduction Initiative (GTRI) program. A key goal of that program is 
to enhance the security of high-risk radioactive materials that could be used in a Radiological 
Dispersal Device (RDD) — commonly known as a “dirty bomb.” An RDD detonated in a major 
metropolitan area could result in economic costs in the billions of dollars as a result of 
evacuations, relocations, cleanup, and lost wages. Radioactive sources such as Cobalt. Cesium, 
Americium, and Iridium are used worldwide for many legitimate purposes and are located at 
thousands of sites in the United Slates and around the world. Since many of the sites that use 
these materials, such as medical, university, research, and industrial facilities are open 
environments, these facilities are more vulnerable to adversaries that may target these materials 
and are more difficult to secure. In looking at the risk, we must include not only outside 
terrorists attempting to steal radioactive sources as potential adversaries, but also insiders who 
work at these facilities who could have intimate knowledge of security procedures and 
vulnerabilities. 
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The 2014 Nuclear Security Summit Communique signed by 53 countries including the United 
States . . sets out a new ambition to secure all radioactive sources, such as those in industry, 
medicine, agriculture or research.”' In addition, the importance of securing high-risk radioactive 
sources was highlighted at the 2014 Nuclear Security Summit^ when 22 additional countries 
signed onto a United States sponsored “gift basket” committing to secure all IAEA Category I 
radioactive materials consistent with the IAEA’s Code of Conduct on the Safety and Security of 
Radioactive Sources, and, where possible, to exceed those guidelines by the 2016 Nuclear 
Security Summit. 

NNSA ROLE TO REDUCE THE RADIOLOGICAL THREAT 

All three agencies appearing in today’s hearing play important roles in reducing the risk of 
radiological terrorism. DNN collaborates with federal partners to reduce the risk of terrorists 
acquiring the materials for an ROD. While the Nuclear Regulatory Commission (NRC) has the 
mandate to license and regulate the use of civilian radioactive sources, NNSA brings the science 
and expertise of its National Laboratories to develop innovative solutions to prevent the 
acquisition of radioactive materials by adversaries. Laboratories from across the DOE/NNSA 
complex bring the experience of work overseas and domestically to identify and implement 
security best practices. 

To address the risks of terrorists or other adversaries acquiring radioactive sources, DNN, in 
cooperation with its federal partners, launched a program in 2007 to implement voluntary 
security efforts at civilian sites in the United States that use or store high-risk radioactive 
materials. The program components include removal of unwanted radioactive sources, 
hardening kits for irradiators and other devices, facility-wide voluntary security enhancements, 
specialized training for security and law enforcement personnel, and tabletop exercises for first 
responders. These voluntary security efforts complement, but do not replace, NRC’s regulatory 
requirements that govern domestic radiological site security. 

When requested by the licensee, DNN’s GTRl program assesses existing security conditions, 
provides recommendations on security enhancements, and when warranted, funds the 
procurement and installation of jointly agreed upon technical security upgrades and training to 
further the level of security. We consider 14 isotopes of concern above threshold quantities, and 
address several areas of security including detection, delay, response, and sustainability. 

These voluntary security enhancement efforts have been endorsed by the NRC, the Department 
of Homeland Security (DHS), the Federal Bureau of Investigation (FBI), the Organization of 
Agreement States (OAS), and the Conference of Radiation Control Program Directors, Inc. 


^ The Hague Nuclear Security Summit Communique. 

https://www.nss2014.com/sites/defauit/files/documents/the Hague nuclear security summit communique fin 
ai.pdf 

^ 2014 Nuclear Security Summit; Statement on Enhancing Radiological Security. 

https://www.nss2014.cQm/sites/defauit/files/documents/statement on enhancing radioloeical security final v 
ersion of 24 march2.pdf 
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(CRCPD). NRC has issued Regulatory Information Summaries (RIS) describing these voluntary 
security enhancement initiatives and recommends that licensees volunteer for these DNN-GTRI 
efforts.^ 

DNN prioritizes which sites receive voluntary security enhancements by assessing the 
attractiveness of the site’s materials for possible use in an RDD, the site’s proximity to DHS 
Urban Area Security Initiative (UASI) locations, and the site’s proximity to other volunteer sites. 
We estimate that there are about 3,000 buildings in the United States that house high-risk 
radioactive materials. As of May 31, 2014, security enhancements and training for 1,742 
buildings have been completed. 

Consistent with U.S. commitments at the 2014 Nuclear Security Summit, DNN will prioritize its 
work at sites containing IAEA Category 1 materials. All Category I buildings in the United 
States currently meet NRC regulations and the international guideline. However, DNN’s GTRI 
program has provided additional voluntary security enhancements that build on this standard to 
273 of 554 Category I sites and will reach out to the remaining 281 sites with the goal of 
completing security enhancements by 2016. Additional security enhancements include In- 
Device Delay (IDD), Remote Monitoring Systems (RMS), and promotion of an adequately 
trained response force that can prevent an adversary from stealing high-risk radioactive 
materials. 

Elimination - Removing Unwanted Sources 

Since 1997, DOE/NNSA’s Off Site Source Recovery Project (OSRP) operated by Los Alamos 
National Laboratory, Idaho National Laboratory, and the CRCPD has reduced the radiological 
risk by recovering and eliminating disused and unwanted sealed sources. DNN, in coordination 
with NRC, developed recovery prioritization criteria based on risk reduction. As of May 31, 
2014, DOE/NNSA has recovered over 36,000 sources. 

Irradiator In-Device Delay tlDDl 

A fundamental component of our voluntary security enhancement program is delay. By 
increasing delay (the amount of time needed by the adversary to gain access to the radioactive 
sources) we give more time for law enforcement to interrupt the adversary before they can steal 
the radioactive source. As a result of the interagency DNN /DHS Domestic Nuclear Detection 
Office (DNDO) cesium irradiator vulnerability study, which utilized input from the three main 
cesium irradiator manufacturers IDD hardening kits were developed for the most widely used 
models of Cesium blood and research irradiators. These IDD kits increase the difficulty for an 
adversary to illicitly access and steal the radioactive source. 

In August 2008 the IDD kit designs were completed. The NRC and corresponding Agreement 
States reviewed the designs and authorized the launch of a voluntary pilot program to install the 


* RIS 2010-02; NRC Regulatory Issue Summary 2010-02 The Global Threat Reduction Initiative (DNN) Federally 
Funded Voluntary Security Enhancements for High-Risk Radiological Materiel, January 21, 2010; 
httD://DbaduDws.nrc.eov/docs/ML1001/ML100150354.Ddf 
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first IDD kits. The pilot effort was deemed a success and DNN has initiated a national 
implementation plan to outfit all qualifying irradiators in the United States. The total number of 
Cesium devices in the United States is about 1,100, of which 815 are IDD eligible at this time. 
Each one of these Cesium irradiators has more than enough material to be used in a significant 
RDD. As of May 31, 2014 IDD kits have been installed on 463 irradiators. The remaining 352 
irradiators can be hardened by FY20. In addition, the manufacturers have agreed to start factory 
hardening, or installing IDD kits at the factory, on all new irradiator sales. DNN has expanded 
its IDD efforts to include devices that use Co-60 

In addition to the IDD hardening kits for Cesium Chloride-based irradiators, DNN voluntary 
security enhancements also include other delay elements such as device tie downs, locks, 
hardened doors/windows, walls, cages, and safes. All of these elements increase the time it takes 
the adversary to gain access to the radioactive source. 

Detection - Remote Monitoring 

A second fundamental component of the voluntary security enhancements program is detection. 
Increased delay coupled with detection that allows responders to arrive prior to source removal is 
considered to be effective. Increased delay without detection or timely response could allow the 
adversary to attack the source/device all weekend and would not be sufficiently effective in 
providing notification to responders of an adversary attack. 

DNN-GTRI supplied detection upgrades include biometric access control devices, door alarms, 
motion sensors, cameras, wireless electronic tamper indicating seals, and area radiation monitors. 
Each of these technologies provides a specific deterrence, control, and/or detection function that, 
when integrated together and with delay, provides a significant security enhancement in a 
holistic manner. 

The program also deploys remote monitoring systems that provide reliable transmission of 
alarms to responders and addresses the insider threat. Remote monitoring systems directly 
mitigate the insider threat by integrating alarms from multiple detection sensors (including 
device tamper sensors and radiation sensors) and prioritize alarms to ensure that critical alarms 
receive immediate attention. Alarms are simultaneously sent to on-site and off-site locations 
such as local police departments, regional emergency operation centers, or security contractors. 
This ensures a timely response by sending a reliable transmission of alarms directly to trained 
off-site experts and responders and protects against a single-point failure if the insider is the on- 
site alarm monitor or guard. 

To address the sustainability portion of our security enhancement concept, DNN provides a three 
to five year maintenance and warranty contract for each security enhancement device, contacts 
each site quarterly to follow-up on the status of the enhanced security system, and conducts one 
foilow-on visit to determine if changes to the operating or threat environment warrant additional 
system enhancements. 

Response - Alarm Response Training 

The most important aspect of any security system is a timely, well equipped, well trained 
response team of appropriate size to interrupt and neutralize the adversary before they gain 
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access to the radioactive source. We have made a focused effort to provide security personnel 
and local law enforcement with the tools and training needed to adequately respond to a security 
incident. 


Most on-site guards at facilities with radioactive sources are not armed nor do the sites have 
large enough force strength to neutralize the threat. Therefore, the key responders are often off- 
site local law enforcement. Despite regulations requiring licensees to coordinate with local law 
enforcement, consistent feedback received from law enforcement officials indicates that they 
were not aware of the nature and risks associated with the material which is in use at hospitals, 
blood banks, universities, oil fields and manufacturing plants in their jurisdiction. It is important 
for their safety, and the safety of their communities, that they receive proper training about 
radioactive sources, about which many misconceptions exist. To ensure that both on-site and 
off-site responders understand how to respond to enhanced security system alarms, we have 
developed an alarm response training course run by the Y-12 National Security Complex in Oak 
Ridge, TN. This provides a venue for licensees and law enforcement officials to be in the same 
room and encourages the required coordination. 


This alarm response training prepares responders to protect themselves and the public when 
responding to events involving radioactive materials. The participants conduct hands-on training 
in a realistic setting using actual protection equipment and real radioactive sources. The courses 
include operational exercise scenarios that build on classroom instruction and allow response 
forces to exercise their own procedures during realistic alarm scenarios. 

As of May 31, 2014, we have conducted 85 training courses for 3,226 participants from 44 
states. 

Table Top Exercises (TTXl 

As the capstone of the voluntary security enhancement support, DNN has partnered with 
NNSA’s Office of the Associate Administrator and Deputy Under Secretary for 
Counterterrorism and Counterproliferation and the FBI’s Weapons of Mass Destruction 
Directorate to provide table top exercises at select nuclear and radiological sites. The purpose is 
to provide a no-fault, site-specific scenario where senior managers from various Federal, State 
and Municipal organizations can exercise their crisis management and consequence management 
skills in response to a terrorist incident. The overall objectives are: 

• Promote cross-sector communication, cooperation, and team-building among Federal, 
State, Local, and private sector first responders; 

• Exercise FBI lead responsibility for criminal investigation; 

• Examine newly developed tactics, techniques, and procedures resulting from DNN 
voluntary security enhancements; 

• Promote attack prevention through intelligence sharing and coordinated approach to 
neutralize the threat; 

• Prepare site specific integrated response plans with Federal, State, Local, and private 
sector partners. 
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As of May 31, 2014, we have conducted 35 TTXs. 

Transportation 

Radioactive sealed sources may be at their most vulnerable when in transit. Recognizing this, 
DNN implements security upgrades beyond regulatory requirements on our own source recovery 
shipments. Theses security enhancements include: 

• Use of the DOE Transportation Tracking and Communication System (TRANSCOM) 
system for continuous monitoring of shipments; 

• Driver duress button provides an alert signal upon activation; 

• Text based communications channel provides a secondary satellite-based communication 
capability between the truck crew and the monitoring center; 

• Delay boxes for up to thirteen 55-gallon-drum-sized packages providing delay from a 
broad variety of breaching tools and tactics; 

• Run-flat inserts for all tires - provides capability to operate the truck at highway speeds 
for up to 50 miles after a tire is flattened. 

INDUSTRIAL RADIOLOGICAL SOURCES 

DNN’s voluntary radiological security program includes addressing the security of industrial 
radioactive sources such as mobile sources used for oil well logging and radiography and 
panoramic irradiators. 

Mobile Radiography and Well Logging Sources 

Oil Field Service companies and Nondestructive Testing companies use radioactive sources in 
their industry - well logging and radiography. Because these sources are mobile (as opposed to 
devices in other industries that remain geographically static in a fixed location for storage and 
operation), DNN is collaborating with device manufacturers and end users to build GPS-enabled 
tracking technologies for radiography and well logging devices, transport containers and 
transport vehicles, and will work to promote appropriate monitoring and response procedures. 

For radiography devices DNN is working with the largest device manufacturer to develop a 
tracking and security solution that will be integrated into the device package itself The security 
package will include tamper and radiation alarms that can be transmitted to monitoring stations. 
A secure storage box with tamper detection would be provided for transport of the device while 
in trucks. DNN will work with industry partners to seek cost sharing arrangements for the 
deployment of the security package once developed. 


For well logging devices, DNN is working with a major oil services company to develop a 
tracking and security system for the source containers while in transport to the field. The 
security package for well logging sources will also include GPS tracking, radiation detection, 
and tamper detection. DNN is implementing the pilot on a cost sharing basis and it is anticipated 
that once the tracking system is developed, major industry partners would procure the 
system. DNN may need to work with smaller industry partners to procure these systems under 
cost sharing arrangements. 
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The successful deployment of tracking and security systems with well logging and radiography 
devices may provide a security solution for these devices in storage as well as while mobile, thus 
reducing the number of buildings that require comprehensive site security upgrades and enabling 
DNN to accelerate overall program timelines. 

Panoramic Irradiators 

Panoramic irradiators have the highest activity of devices that use radioactive sources containing 
1 to 7 million curies of Cobalt-60. The activity in Cobalt-60 sources in panoramic irradiators 
accounts for over 98% of the total activity in ail civilian radiation sources in the United States. 
Industrial panoramic irradiators are used to irradiate single-use medical devices and products, 
cosmetics, food, and plastics. The sealed source is contained in a storage pool and is fully 
shielded when not in use; the sealed source is exposed within a radiation volume that is 
maintained inaccessible during use by an entry control system. These panoramic irradiators 
require re-sourcing every 1 8-24 months, which involves the transport of large quantities of 
Cobalt-60 throughout the United States and installation of Cobalt-60 pencils in the source rack. 
There are two major companies which operate the majority of the more than 60 industrial 
panoramic irradiators in use in the United States. 

Due to the complexities of designing and installing security enhancements for panoramic 
irradiators, DNN is implementing a pilot security project at one panoramic facility. Once the 
pilot is proven successful and a working security system is installed, DNN will work with the 
industry partners to gain buy-in for expansion of security enhancements to the other panoramic 
irradiator sites. 

Government Accountability Office (GAO) RECOMMENDATIONS 
In the GAO’s September 2012 report on Security of Radiological Medical Sources'*, the GAO 
recommended that NNSA increase outreach efforts to promote awareness and participation in 
NNSA’s security program giving special attention to medical facilities with high-risk radioactive 
sources located in or in close proximity to urban areas. NNSA DNN has developed a strategy to 
further enhance its outreach efforts by: 

• Accelerating and expanding outreach activities in conjunction with State regulators in 
states with the most IAEA Category I sites remaining, including Georgia, Florida, 
Wisconsin, Illinois, Texas, and California; 

• The development and issuance of publications on DNN Security Recommendations 
for Users of Radioactive Sources and Security by Facility Design; 

• Assisted NRC in creation of its security best practices guide. 

The GAO’s Draft May 2014 report on Security of U.S. Radiological Sources included a 
recommendation to NNSA stating “to better leverage resources, including expertise, to address 


GAO-12-925, United States Government Accountability Office, Nuclear Nonproliferation: Additional Actions 
Needed to Improve Security of Radiological Sources at U.S. Medical Facilities. httD://www.gao.gov/products/GAO- 
12-925 
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vulnerabilities with radioactive sources while in transit, we recommend that the Administrator of 
NNSA, the Chairman of the NRC, and the Secretary of DHS review their existing collaboration 
mechanism for opportunities to enhance collaboration, especially in the development and 
implementation of new technologies.”^ 

In implementing voluntary security enhancements at sites with radioactive sources, NNSA has 
maintained close coordination and cooperation with Federal, State, and local agencies and the 
private sector. In particular, we have established strong working relationships with the NRC, 
DHS, and the FBI. 

To coordinate these complementary efforts, DNN participates regularly in meetings of the DHS- 
chaired Nuclear Sector Government Coordinating Council, the NRC-led Radiation Source 
Protection and Security Task Force, tri-lateral meetings comprised of senior representatives from 
NNSA, DHS, FBI, and NRC, and many additional working level meetings. These coordination 
venues have helped communicate to officials throughout the government so that they are aware 
of new initiatives, ongoing implementation efforts, and challenges encountered with enhancing 
radioactive source security. 

In response to the GAO’s recommendation, NNSA will continue to seek opportunities to further 
enhance coordination. DNN has recently briefed DNDO on its material tracking technology 
plans, has provided briefings on DNN RDD studies, and is jointly exploring options to enhance 
collaboration on response training and exercises. 

STRATEGY FOR PERMANENT THREAT REDUCTION 

While DNN continues to proceed with implementation of security enhancements for high-risk 
radioactive materials, several factors led DNN to consider a new strategic approach to addressing 
the RDD threat through actions that achieve permanent and sustainable threat reduction. These 
factors include the large number of radioactive sources worldwide, the ongoing production of 
new devices with radioactive sources, and the long-term costs for sustaining security systems. 

DNN is developing a broader strategic approach to achieve more permanent risk reduction for 
vulnerable radioactive materials that will complement the existing removal project. The 
centerpiece of this strategy is to lead a worldwide effort to provide reliable non-radioactive 
alternatives for the highest activity radioactive sources that pose the greatest risk. DNN will 
promote the conversion or replacement of devices that use radioactive materials to non- 
radioactive material devices, thereby removing certain risk of an RDD threat to the United States 
and worldwide. DNN is considering the provision of incentives for replacement where 
commercially viable alternatives exist and is collaborating with Defense Nuclear 
Nonproliferation’s Research and Development Office to explore and assess technological 
improvements that could be developed and ultimately transferred to industry for 
commercialization where necessary. 

^ GAO-14-203 DRAFT, United States Government Accountability Office, Nuclear Nonproliferation: Additional 
Actions Needed to Increase Security of U.S, Industrial Radiological Sources. 
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For instance, DNN is exploring the possibility of providing incentives for replacement of Cesium 
irradiators with commercially available x-ray devices, which might include cost sharing for new 
x-ray devices along with payment for removal of the Cesium irradiator. This approach may 
accelerate program timelines by implementing replacements instead of enhancing security and 
also will achieve permanent threat reduction. DNN is exploring the feasibility of replacement 
options for other devices including teletherapy, radiography, and well logging. 

CONCLUSION 

Our efforts on radioactive security measures to reduce the risk of terrorists acquiring an RDD are 
vital. We will continue to seek innovative approaches to enhancing security of high-risk 
radioactive materials. With your continued support, NNSA will continue to work with federal 
and industry partners to implement security enhancements on an accelerated basis in the most 
cost effective manner possible. 

That concludes my statement and I will be happy to respond to your questions. 
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Good morning Chairman Carper, Ranking Member Coburn, and distinguished Members of the 
Committee. As Director of the Department of Homeland Security’s (DHS) Domestic Nuclear 
Detection Office (DNDO), 1 am pleased to testify today with my distinguished colleagues to 
discuss efforts to prevent and prepare for radiological events. 

Since its inception, DNDO has built essential partnerships, architecture, and capabilities to detect 
and interdict radiological and nuclear threats. My testimony today focuses on that work and our 
continued efforts to improve information sharing and collaboration with our state and local 
partners. 

DNDO’s Efforts to Prevent and Prepare for Radiological and Nuclear Terrorism 

Radiological and nuclear terrorism remains one of the greatest threats not only to our Nation’s 
security, but to global security. Such an attack would have profound and prolonged impacts to 
our Nation and to the world. DNDO works with federal, state, local, international, and private 
sector partners to develop the appropriate detection capabilities to prevent and prepare for 
radiological and nuclear events. 

DNDO’s focus is on detecting and reporting attempts to import, possess, store, develop, or 
transport radiological and nuclear material that is out of regulatory control, and may be used 
against the Nation. We work closely with the Nuclear Regulatory Commission and the 
Department of Energy (DOE), who are responsible for securing radioactive materials. Together, 
they are working on initiatives to improve the security of risk-significant sources. Although 
DNDO is not directly involved in the physical security of radioactive sources, we coordinate 
with federal, state, and local agencies to detect and locate materials once they are lost or stolen. 

Recognizing the threat posed by radiological and nuclear materials, DNDO was created by 
Presidential Directives NSPD-43 and HSPD- 14. DNDO was subsequently given statutory 
authority by Title V of the SAFE Port Act (Pub. L. No. 109-347), which amended the Homeland 
Security Act of 2002. Pursuant to Section 1902 of the Homeland Security Act, along with its 
technical nuclear forensics mission, DNDO is required to develop, with the approval of the 
Secretary and in coordination with the Intelligence Community, the Departments of Energy, 
State, Defense and Justice, and other components within DHS and our international partners, an 
enhanced global nuclear detection architecture, and is responsible for implementing its domestic 
component. The global nuclear detection architecture is a framework for detecting, analyzing, 
and reporting on nuclear and other radioactive materials that are out of regulatory control. 
Working with our partners, DNDO conducts transformational research, development, testing, 
and evaluation of advanced detection technologies, measures detector system performance, and 
ensures effective response to detection alarms. Additionally, DNDO leads the development and 
implementation of the national strategic five-year plan for improving the nuclear forensic and 
attribution capabilities of the United States required under section 1036 of the National Defense 
Authorization Act for Fiscal Year 2010. Nuclear forensics serves as the technical component of 
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our capability to attribute nuclear events. As such, it is a keystone of the U.S. policy to hold fully 
accountable any state, terrorist group, or other non-state actor that supports or enables terrorist 
efforts to obtain or use weapons of mass destruction. 

While DHS focuses on threats of all types, DNDO’s sole focus is on the prevention of 
radiological and nuclear terrorism. To maximize the ability to detect and interdict threats, we 
rely on the critical triad of intelligence (including information sharing), law enforcement 
(including training), and technology. In doing so, we apply detection technologies in 
intelligence-cued searches conducted by well-trained law enforcement and public safety 
officials. Contributions from our state and local partners are vital to the domestic component of 
the global nuclear detection architecture. As such, we continue to work with them to build a 
flexible, multi-layered, domestic architecture based on capabilities that can be integrated with 
federal assets into a unified response when intelligence or information indicates a credible 
nuclear threat. 

Intellkence and Information Exchange 

The first leg of the critical triad is intelligence and information sharing, which forms the 
backbone of a robust detection architecture. State and major urban area fusion centers, State 
Emergency Control Centers, and the Federal Bureau of Investigation regional offices provide the 
necessary information exchange pathways. In the event of an emergency, this connected system 
provides federal, state, and local personnel with the ability to exchange sensitive information in a 
timely and secure fashion. 

DHS as a whole has enhanced information sharing capabilities by: 

• Improving production and dissemination of classified and unclassified information 
regarding threats to the Homeland; 

• Continuing to improve analytic capabilities through the development of a national 
network of state and major urban area fusion centers so that national intelligence can be 
incorporated into a local context; 

• Standardizing how we train state and local law enforcement to recognize indicators of 
terrorism-related criminal activity and report these suspicious activities to Joint Terrorism 
Task Forces for investigation and to fusion centers for analysis; 

• Increasing community awareness and encouraging the public to report suspicious activity 
to local authorities; 

• Deploying 70 Homeland Secure Data Network systems across the country to provide 
access to classified information and intelligence at the local level; 

• Training state and local analysts at fusion centers to ensure they have the necessary skills 
and expertise to analyze and fuse intelligence and information from the Intelligence 
Community with local/regional context and produce relevant and timely products for 
their stakeholders; and 
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• Developing tailored product lines to meet the needs of state and local partners, and 
expanding the distribution of products to ensure all relevant and appropriate information 
is shared with state and local partners. 

Joint Analysis Center 

DNDO’s Joint Analysis Center is also essential in enhancing situational awareness, as well as 
providing technical support and informational products, to federal, state, and local partners. The 
Joint Analysis Center utilizes a secure web-based dashboard to collaborate with mission partners 
and uses a geographic information system to show detection information, detectors, situational 
awareness reports, and other overlays in a geospatial viewer. Utilizing the Joint Analysis Center 
Collaborative Information System (JACCIS), DNDO facilitates nuclear alarm adjudication and 
the consolidation and sharing of information and databases. JACCIS provides our state and local 
partners with the ability to manage, document, and execute a radiological and nuclear detection 
program. This includes the ability for them to maintain training, certification, and Memoranda 
of Understanding and Memoranda of Agreement between jurisdictions. JACCIS also 
consolidates and maintains a database of detector equipment and Nuclear Regulatory 
Commission State licenses. Finally, through this information system, we connect to the Triage 
system, maintained by the DOE's National Nuclear Security Administration, to enable a seamless 
transition when national-level adjudication assistance is required. 

DHS Capacity Building with Operational Partners 

The second leg of the critical triad is law enforcement. DHS realizes that state and local law 
enforcement officers and public safety officials are on the frontline of detection and prevention 
efforts and we work very closely with them to ensure that they have the equipment, training, and 
information necessary to prevent and prepare for threats. Through Federal Emergency 
Management Agency grants and other DHS programs such as Securing the Cities, we have 
helped our state and local partners procure and deploy radiation detection equipment across the 
Nation. This equipment is one of the building blocks for a radiation detection program. 

DHS has made considerable progress in enhancing radiation detection capabilities by: 

• Engaging with 29 states to raise awareness and begin developing formal radiological and 
nuclear detection programs. By the end of Fiscal Year 2015, DNDO plans to expand its 
efforts to reach all 50 states. 

• Supporting activities in the New York City/Jersey City/Newark region. Through the 
Securing the Cities program, DNDO has developed a robust regional nuclear detection 
program that serves as a model for future sites. 

• Based on lessons learned in the first implementation, DNDO expanded the Securing the 
Cities program in Fiscal Year 2013 to the Los Angeles/Long Beach area and will select a 
third region in Fiscal Year 2014, 
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In addition, DNDO provides the ability to surge resources for use during special events, times of 
increased threat, or in response to information or events that indicate the need for enhanced 
detection capabilities. This is conducted using Mobile Detection Deployment Units, trailer- 
based units outfitted with an extensive suite of nuclear detection equipment and communications 
capabilities. These units are deployed regionally across the United States and can be deployed as 
needed to augment federal, state, and/or local capabilities. Each unit is configured to outfit 
numerous personnel and contains a number of systems that can be used in vehicle backpacks, 
high-resolution handheld devices, personal radiation detection devices, communications, and 
tracking equipment. When deployed, the unit is accompanied by technical support staff to train 
federal, state, and/or local personnel on the use of equipment and to help integrate these surge 
capabilities into other protective operations. Since 2009, DNDO has deployed the Mobile 
Detection Deployment Units to more than 149 special security events and exercises in support of 
federal, state, and local law enforcement and public safety personnel. 

Training is an essential element of the law enforcement leg of the critical triad. This is 
particularly important since, the ability to detect illicit radiological and nuclear material is a 
perishable skill that must be continuously refreshed. Consequently, in addition to assisting our 
partners with the procurement of detection systems, DNDO supports the development and 
delivery of robust training programs to expand and enhance radiation detection capabilities. 
Through many collaborative efforts, we have provided radiation detection training to over 27,000 
state and local law enforcement personnel and first responders, 

A significant part of any training program includes exercises. To this end, we work with our 
state and local partners to design and conduct realistic exercises that provide operators with 
valuable hands-on experience in radiological detection operations. Annually, we conduct 
approximately 1 5 tabletop or full-scale exercises across the country that specifically stress 
operators’ ability to detect radiological material that is out of regulatory control. 

In the day-to-day work of a first responder, the occurrence of illicit radiological or nuclear 
incidents is rare, making training, exercises, and assessments particularly important so that 
individuals remain ready to react to an actual incident. This is where we bring to bear our unique 
red team capabilities that can challenge our operational partners with uncommon nuclear sources 
and scenarios. Annually, DNDO’s red team conducts over 20 operations, evaluating deployed 
systems and operations, and their associated tactics, in as-close-to-realistic environments as 
possible. They utilize adversary tactics and scenarios to challenge federal, state, and local 
operators performing radiological and nuclear detection and interdiction operations. 

New Technologies for Nuclear Detection 

The final leg of the critical triad is technology, DNDO continues to develop breakthrough 
technologies with significant operational impacts on our national capability to detect radiological 
and nuclear threats. For example, DNDO led the development of next-generation radioisotope 
identification devices which are used by law enforcement officers and technical experts during 
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operations to identify radioactive material. We worked closely with U.S. Customs and Border 
Protection, U.S. Coast Guard, the Transportation Security Administration, and state and local 
operators to identify key operational requirements for the design of the new system. Based on an 
enhanced detection material, lanthanum bromide, and improved algorithms, this new handheld 
technology is easy-to-use, lightweight, and more reliable. Additionally, because it contains built- 
in calibration and diagnostics, it has a much lower annual maintenance cost. 

Several DNDO sponsored research efforts have led to new commercial products providing 
federal, state, and local law enforcement and public safety personnel with enhanced operational 
capabilities. DNDO funded the development of Strontium Iodide and Cesium Lithium Yttrium 
Chloride which are radiation sensing materials with enhanced detection characteristics. 
Commercial product lines using these enhanced capabilities are now available, and DNDO 
proactively engages industry to procure commercial-off-the-shelf devices to field such new 
technologies for nuclear detection. 

By eliminating technical risk for industry, DNDO’s research in networked radiation detector 
systems has led to making commercial products available to responders. These networked 
detector systems provide operators with enhanced detection, location, and tracking abilities, 
DNDO also supports ground-breaking research to improve current capabilities. For example, we 
arc developing a next generation aerial radiological detection system, the Airborne Radiological 
Enhanced-Sensor system. This system places highly-scnsitive radiation detector arrays with a 
visual target tracking capability aboard a helicopter to provide responders with a significantly 
enhanced ability to detect threats on the ground and at sea. 

DNDO has also made strides in protecting the Nation from nuclear terrorism through test and 
evaluation assistance. To develop effective detection programs, federal, slate, and local partners 
require reliable information on the technical performance, operational effectiveness, and 
suitability of currently available nuclear detection equipment. DNDO has established a robust 
test and evaluation capability to rigorously assess commercially available detection systems 
against national and international standards and in operational scenarios. For instance, DNDO 
recently completed the Illicit Trafficking Radiation Assessment Program, a collaboration with 
the European Commission’s .Joint Research Center and the International Atomic Energy 
Association. The program tested nearly 80 available instruments against consensus standards. 
The testing enabled our stakeholders to compare the performance of commercially available 
radiation detection equipment and provided manufacturers with constructive feedback on their 
products. 

By including operational partners in the planning and execution of test events, we ensure the 
equipment is tested in the manner in which it will be used. Such tests independently assess 
system performance and provide operational data to develop effective concepts of operation. 
Since inception, DNDO has conducted over 96 test campaigns that involve all classes of nuclear 
detection systems, including personal radiation detectors, handheld, backpack and mobile 
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detection systems, radiation portal monitors, and radiation detection systems suitable for 
maritime environments and aerial platforms. The results of these efforts are shared with 
operational partners to inform acquisition decisions. 

Conclusion 

Chairman Carper, Ranking Member Cobum, and distinguished Members of the Committee, 
thank you for the opportunity to discuss the ongoing efforts of DNDO to prevent and protect 
against radiological threats. 

I appreciate your continued support as we work with our partners to make nuclear terrorism a 
prohibitively difficult undertaking for the adversary. By developing, evaluating, and deploying 
the right technologies, ensuring timely intelligence and information sharing, and regularly 
training and exercising with our law enforcement and public safety officials, we can effectively 
protect our Homeland from radiological and nuclear terrorism. 
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Good morning Chairman Carper, Ranking Member Coburn, and distinguished Members 
of the Committee. I appreciate the opportunity to appear before you today on behalf of the U.S. 
Nuclear Regulatory Commission (NRC). Today I'd like to address the NRC’s activities to ensure 
the security of radioactive sources. 

Radioactive source security has been, and continues to be, a top priority for the NRC. 
The NRC’s efforts have been effective, keeping incidents involving radioactive sources to a 
minimum, and their potential consequences low. The NRC continues to work with the 37 
Agreement States and domestic and international organizations on a variety of initiatives to 
make risk-significant radioactive sources even more secure and less vulnerable to malevolent 
use. 

Brief History of Materials Security at NRC 

The events of September 1 1 , 2001 , changed the threat environment and resulted in 
significant strengthening of the security of radioactive sources. While the NRC’s fundamental 
goals to protect public health and safety, promote the common defense and security, and 
protect the environment, remained unchanged, the NRC recognized a need to increase its 
requirements for security of radioactive sources. Immediately following September 1 1 , 2001 , 
the NRC, working with other Federal and State agencies, prioritized actions to enhance the 
security of radioactive sources and facilities. These initial actions resulted in the NRC 
disseminating a number of security advisories to NRC and Agreement State licensees, 
recommending specific actions to enhance security, address potential threats, and 
communicate general threat information. Although these security advisories did not impose 
legally binding requirements, much of the regulated community understood the change in the 
threat environment and the need for increased security and implemented the recommended 
actions. 
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With voluntary security measures In place, the NRC proceeded with multiple activities in 
parallel. The NRC provided experts to serve on both national and international working groups 
to determine what radioactive sources needed enhanced security. The NRC staff also actively 
participated in studies, both domestic and international, to examine commonly used medical, 
academic, and industrial radioactive sources. These efforts eventually became the list of 
sources found in the International Atomic Energy Agency Code of Conduct on the Safety and 
Security of Radioactive Sources. 

The NRC sought to move away from voluntary security enhancements and toward 
legally binding requirements subject to inspection and enforcement. As this transition occurred, 
the NRC recognized the need to carefully integrate this increased security with the existing 
regulatory structure for safety of radioactive and to ensure that security measures do not 
diminish safety. Together with the law enforcement and intelligence communities, the NRC staff 
conducted threat analyses to document the credible motivations, intentions, and capabilities of 
potential adversaries. The NRC also conducted facility security assessments to help inform the 
additional security and control measures needed to protect against the risk of malevolent use 
risk-significant radioactive sources. Once the NRC identified specific actions that licensees 
needed to take to enhance the security and control of risk-significant sources, the NRC 
incorporated all this information to develop requirements to improve the ability to detect, assess, 
and interrupt adversaries who attempt to steal, divert, or sabotage radioactive sources. These 
requirements included: 

• Access controls, including fingerprinting and background checks for personnel 
with unescorted access to the sources 

• Detection, assessment, and response capabilities 

• Transportation controls 

• Information protection 

The NRC issued Orders that imposed legally binding requirements on individual 
licensees. The need for urgency revealed by threat assessments and facility security 
assessments made it essential for the NRC to act quickly to remove any security gaps by using 
orders, rather than the normal rulemaking process which takes longer. 
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In order to prioritize its work on risk significance, Orders for the most risk significant 
facilities, such as commercial nuclear power plants, were first issued in 2002. Orders were 
issued to large panoramic and underwater irradiators in June 2003, manufacturers and 
distributors of radioactive material In January 2004, and licensees transporting radioactive 
materials in July, 2005. Other risk-significant materials licensees received Orders in late 2005. 

In 2005, the Energy Policy Act expanded the NRC's authority to ensure the security and 
control of additional risk-significant materials, and required fingerprinting and Federal Bureau of 
Investigation (FBI) criminal history records checks for individuals with unescorted access to risk- 
significant radioactive sources. This legislation also mandated the development of a national 
registry of radioactive sources. Accordingly, in 2007, the NRC and Agreement States issued 
additional security Orders to licensees requiring fingerprinting and an FBI criminal history 
background check on anyone with unescorted access to risk significant radioactive sources. 

The Energy Policy Act of 2005 also established an interagency task force on radiation 
source protection and security under the lead of the NRC to evaluate and provide 
recommendations to the President and the Congress relating to the security of radiation sources 
in the U.S. from potential terrorist threats. This task force submitted its first report to the 
President and Congress in August 2006, concluding that there were no significant gaps in the 
area of radioactive source protections and security that were not already being addressed. The 
Task Force submitted its second report to the President and Congress in August 2010, 
providing an update on the progress made since the 2006 report and proposing new 
recommendations in an effort to continue to improve the security of radioactive sources. The 
Task Force will submit the third report in August, 2014. 

National Materials Management Program 

In late 2006 and early 2007, the U.S. Government Accountability Office (GAO) 
conducted a test on the NRC’s controls governing the issuance of licenses for possessing 
certain types of radioactive sources, and for enforcing possession limits on the quantities of 
those materials. GAO reported that they were able to obtain radioactive sources licenses for two 
fictional companies, modify the licenses to raise the possession limits, and then use the 
augmented licenses to receive quotes for purchasing radioactive sources from legitimate 
licensees. GAO did not acquire the materials. 
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A hearing was held July 12, 2007, by the Permanent Subcommittee on Investigations of 
this Committee following issuance of GAO's report. At that hearing, a web-based licensing 
(verification) system was discussed which would allow suppliers to validate purchaser licenses, 
and the authorized quantity that a purchaser could obtain. 

In an effort to better track transactions of radioactive sources nationally, the NRC 
developed a portfolio of automated tools to track credentials, inspections, devices and sources, 
and events, and verify licenses. This portfolio includes: the National Source Tracking System 
(NSTS), the Web Based Licensing (WBL) System and the License Verification System (LVS), 

The NSTS allows the NRC to follow transactions of nationally-tracked, high-risk 
radioactive sources from origin, through transfer to another licensee, to final disposition. The 
WBL System assists in managing the NRC’s licensing information regarding businesses that 
use radioactive sources. The LVS is a "national verification system" that accesses license 
information and ensures that only authorized licensees obtain radioactive sources in authorized 
amounts. These systems ensure that national radioactive source authorization, possession, and 
transaction information is available to all government agencies that protect the country from 
radiological threats; provide licensees with a secure automated means to verify license 
information and possession authorization prior to initiating radioactive source transfers; enable 
the NRC and the Agreement States to monitor the location, possession, transfer, and disposal 
of high-risk radioactive sources throughout the country; improve source accountability by 
licensees; and alert regulators to track discrepancies. 

Improvements in Pre-licensina Activities 

Another recommendation of the 2007 GAO report was for the NRC to improve its pre- 
licensing activities. As a result, the NRC ceased relying on the presumption that applicants for a 
license were acting in “good faith,” and instead instituted a policy by which the NRC and the 
Agreement States would verify the legitimacy of applicants when first dealing with them. We 
also issued pre-licensing guidance that includes various applicant and licensee screening 
activities and site visits to ensure radioactive source will be used as intended. 

Integrated Materials Performance Evaluation Program 

In the area of materials security, the NRC and Agreement State regulatory agencies 
have worked together to create a strong and effective regulatory framework that provides an 
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appropriate level of security for risk-significant radioactive sources to ensure adequate 
protection of public health and safety, and provide for the common defense and security. 

The Atomic Energy Act (AEA) gives the NRC preemptive authority over health and 
safety and common defense and security regulation of the possession and use of AEA 
materials. Subsequent amendments to the AEA added Section 274 of the Act which created 
the Agreement State program, under which the NRC may relinquish its health and safety 
authority of AEA material specified in formal agreements. When a State applies to become an 
Agreement State, the NRC reviews the State’s regulatory program to ensure that the program is 
both adequate to protect public health and safety and compatible in all other respects with the 
NRC’s own program. In addition, the AEA does not allow the NRC to relinquish the authority to 
protect the common defense and security to an Agreement State. Thus, the Commission 
retains the authority to impose security requirement on Agreement State licensees. 

The AEA also requires the NRC to periodically review the 37 Agreement State 
programs. In 1997, the Commission fully implemented a process, the Integrated Materials 
Performance Evaluation Program (IMPEP), to assess its own regional materials programs as 
well as those of the Agreement States. The program uses a set of common performance 
indicators as a basis for an integrated assessment of a regional or Agreement State program. 
The IMPEP provides the NRC with a systematic, integrated, and reliable evaluation of the 
strengths and weaknesses of the respective programs. This in-depth process provides an 
indication of areas in which NRC and the Agreement States should dedicate more resources or 
management attention. 

NRC Regulations flO CFR Part 371 

Developing a radioactive source security rulemaking to replace the Orders and State 
requirements described above, and provide generally applicable requirements to a broad set of 
licensees required a significant collaborative effort between the NRC and the Agreement States. 
This rulemaking was informed by numerous insights regarding implementation of the Orders, as 
informed by inspections, self-assessments, and external audits. The challenge was to create a 
materials security rule that incorporated realistic approaches to enhancing security and that 
would interface and integrate well with the NRC’s existing safety rules. 


The resulting rule (10 CFR Part 37) is an optimized mix of performance-based and 
prescriptive requirements that provide the framework for a licensee to develop a security 
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program for risk significant materials with measures specifically tailored to their facilities. The 
rule became effective May 20, 2013; compliance was required for NRC licensees by March 19, 
2014. Agreement State licensees must fulfill compatible requirements by March 2016. Key 
requirements include: 

• Background checks, including fingerprinting, to help ensure that individuals with 
unescorted access to radioactive sources are trustworthy and reliable; 

• Controlling personnel access to areas where risk-significant radioactive sources 
are stored and used; 

• Documented security programs that are designed with defense in depth to 
detect, assess, and respond to actual or attempted unauthorized access events; 

• Coordination and response planning between licensees and local law 
enforcement agencies for their jurisdiction: 

• Coordination and tracking of radioactive source shipments; and 

• Security barriers to discourage theft of portable devices that contain risk- 
significant radioactive sources. 

Inspection and Enforcement 

Trained NRC inspectors and investigators identify violations of security requirements 
through routine and special inspections. When violations of security requirements are identified, 
licensees are required to implement corrective actions before the inspector completes the 
inspection. NRC inspectors verify and evaluate these corrective actions during subsequent 
inspections. After a violation is identified, the NRC assesses the significance of a violation by 
considering the actual safety and/or security consequences, the potential consequences, and 
any willful aspects of the violation. Depending on the severity of the violation, the NRC may 
impose civil enforcement actions, and the licensee may also be subject to criminal prosecution. 

The NRC has an extensive training program for personnel conducting security 
inspections. The NRC training program is available to Agreement States as well, and only 
qualified inspectors can conduct security inspections. Qualification requires a candidate both to 
complete training and to accompany qualified inspectors on inspections. In addition to providing 
training, the NRC also maintains a secure online information-sharing tool for NRC and 
Agreement State inspectors. This resource is available for inspectors seeking additional 
guidance to resolve questions related to security of risk-significant radioactive material. 
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GAO Audits 

The NRC radioactive source security program has been the focus of two recent GAO 
audits. In the first audit, the GAO reviewed the NRC’s security requirements for risk-significant 
radioactive sources possessed, and in use at U.S. medical facilities. However, because the 10 
CFR Part 37 regulations were not in effect at the time of this most recent GAO audit, the GAO 
report focused on the NRC security requirements that were issued to licensees by Orders. As 
noted earlier, the Part 37 rule did not simply codify the security orders, but expanded upon the 
security requirements in those Orders, The 2012 GAO report concluded that the NRC security 
controls needed to be strengthened because they do not prescribe specific security measures 
(such as specific requirements on the use of cameras, alarms and other physical security 
measures) that the licensee should take to secure their radiation sources. 

The NRC did not agree with this conclusion. The NRC believes prescriptive “one-size- 
fits-all” regulations may result in either excessive or non-conservative approaches to source 
security. The GAO based its conclusions on four examples identified during its field work to 
support their final report (out of 26 facilities GAO visited). The NRC and Agreement States 
conducted follow-up evaluations with three of the licensees GAO identified, and concluded that 
there was no violation of NRC security requirements. The NRC was unable to identify the fourth 
licensee to pursue further action. The NRC’s and Agreement States’ view is that such a failure 
to properly implement security controls would be a compliance issue to be addressed through 
inspection and enforcement. This example does not indicate that the performance based 
regulatory framework itself is inadequate. 

While the NRC did not agree with the GAO recommendation for prescriptive-based 
regulation, the NRC did acknowledge the GAO concerns that some of the licensee personnel 
with security responsibility lack expertise in physical security, which may result in inconsistent 
application of security controls to their programs. In response to this recommendation, the 
NRC developed and provided additional written guidance to instruct licensees on best security 
practices. This best practices document is in addition to the implementation guidance document 
already developed to accompany the publication of 10 CFR Part 37. 

The latest GAO audit reviewed the NRC program of security requirements for risk- 
significant radioactive sources used in industrial settings. In this audit, GAO raised concerns 
with how the NRC defines collocation of sources, the trustworthiness and reliability process 
(questioning whether it provides reasonable assurance against an insider threat), and the 


7 



49 


development of the best security practices document (specifically that licensees were not 
directly involved in the development of this document). 

Again, this GAO report focused on the NRG security requirements that were issued to 
licenses by Orders because the 10 CFR Part 37 regulations were not in effect at the time of the 
audit. The NRC acknowledges the concerns raised by the GAO in the most recent audit, and is 
committed to reviewing the effectiveness of the requirements to determine whether any 
additional security enhancements are necessary. If additional measures are needed, the 
Commission will consider appropriate security enhancements. 

Federal Collaboration 

Nuclear and radioactive materials are a critical and beneficial component of global 
medical, industrial, and academic efforts. Domestically, the NRC and the Department of 
Energy/National Nuclear Security Administration (NNSA) have worked together with a common 
goal of ensuring radioactive sources are not being used for malevolent purposes. 

NNSA, through its Global Threat Reduction Initiative (GTRI), provides government- 
funded physical security enhancements to licensees on a voluntary basis. These voluntary 
enhancements are supplementary to, but do not replace, licensees’ obligations to meet NRC 
and Agreement State regulatory requirements. The voluntary security enhancements go 
beyond the NRC's regulatory requirements. The NNSA program also provides other important 
and valuable benefits and enhancements, including removal of disused radioactive sources and 
specialized training for local law enforcement. 

Lookino Forward 

Since September 1 1 , 2001 , the NRC and Agreement States have worked together to 
create a strong, effective regulatory framework that provides an appropriate level of security for 
risk-significant radioactive sources to ensure adequate protection of public health and safety, 
and the common defense and security. The NRC’s efforts in radioactive source security have 
not ended with the publication and implementation of our 1 0 CFR Part 37 rule. The NRC will 
continue to assess its programs to ensure they promote the safe and secure use and 
management of radioactive sources. 
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Chairman Carper, Ranking Member Dr. Coburn, and Members of the 
Committee: 

I am pleased to be here today to discuss the challenges federal agencies 
face in securing industrial radiological sources. The Nuclear Regulatory 
Commission (NRC) plays an important role in licensing and regulating the 
security of radiological sources in the United States, (n addition, 37 states 
are responsible for implementing licensing programs, including security 
inspections, for industrial radiological sources. These states are referred 
to as "Agreement States."^ The National Nuclear Security Administration 
(NNSA) provides security upgrades to U.S. facilities with high-risk 
radiological sources beyond what NRC requires. In addition to NRC and 
NNSA. the Department of Homeland Security (DHS) is the primary 
federal agency responsible for implementing domestic nuclear detection 
efforts. My remarks today are based on our report that is being released 
at this hearing, entitled Nuclear Nonproliferation: Additional Actions 
Needed to Increase the Secunty of U.S. Industrial Radiological Sources.^ 

Radioactive material is used worldwide for legitimate commercial 
purposes, Including industrial processes In the oil and gas, aerospace, 
and food sterilization sectors, it is typically sealed in a metal capsule, 
such as stainless steel, titanium, or platinum, to prevent its dispersal and 
is commonly called a sealed source.^ Some of these sources are highly 
radioactive and are found in a variety of devices, ranging from mobile 
industrial radiography sources containing hundreds of curies of iridium- 
192 to larger irradiators with thousands, or even millions, of curies of 
cobalt-60.^ In the hands of terrorists, these sources could be used to 
produce a simple and crude, but potentially dangerous weapon known as 
a radiological dispersal device or dirty bomb, whereby conventional 
explosives are used to disperse radioactive material. 

The potential vulnerability of radiological sources was highlighted in 
December 2013 when a truck in Mexico carrying a cobalt-60 source was 


U.S.C. § 2021(b) (2013). 

^GAO, Nuclear Nonproliferatior\: Additional Actions Needed to Increase the Security of 
U.S. Industiial Radiological Sources. GAO-14-293 (Washington, D C,: June 6, 2014). 

^Such material includes americium-241, cesium-137, cobalt-60, and iridium-192. 

'‘a curie is a unit of measurement of radioactivity. 
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stolen. Although the source was recovered 2 days later, NNSA officials 
said that the container housing the source was opened by the thieves, 
and NNSA was uncertain whether the intended target was the truck or the 
radiological source. 

The threat of an individual stealing a radiological source includes both an 
outsider and insider threat. According to the Federal Bureau of 
Investigation’s (FBI) website, a company can often detect outsiders {I.e., 
nonemployees) and mitigate the threat of them stealing company 
property. However, the individual who is harder to detect is the insider— 
the employee with legitimate access. 

The security of radiological sources in the United States has been a focus 
of our work over the past several years, and we have reported on the 
challenges federal agencies face in ensuring their security and have 
recommended specific actions to address them, Specifically, in 
September 2012,® we reported that, at the 26 selected hospitals and 
medical facilities we visited, NRC's controls did not consistently ensure 
the security of high-risk radiological sources. 

In this context, my testimony today summarizes the findings from our 
most recent report on industrial radiological security in the United States. 
Accordingly, this testimony addresses (1) the challenges in reducing the 
security risks posed by high-risk industrial radiological sources and (2) the 
steps federal agencies are taking to ensure that high-risk industrial 
radiological sources are secured. 

For our report, we visited 33 Industrial facilities in the United States.® We 
also reviewed layers, regulations, and guidance related to the security of 
industrial radiological sources and interviewed agency officials at NRC, 
NNSA, and DHS. Additional information on our scope and methodology Is 
available in our report. Our work was performed in accordance with 
generally accepted government auditing standards. 


®GAO. Nuclear Nonproliferation: Additiofial Actions Needed to Improve Security of 
Radiological Sources at U.S. Medical Facilities. GAO-12-925 (Washington. D.C.: Sept 10, 
2012 ). 

®These fecilities included, among others, industrial radiography companies, commercial or 
sterilization companies, academic research facilities, and well logging companies. 
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Challenges Exist in 
Reducing Security 
Risks for Different 
Types of Industrial 
Radiological Sources 
and from Insider 
Threats 


We identified two main types of Industrial radiological sources during the 
course of our review — mobile and stationary sources — that pose security 
challenges, even when licensees follow NRC’s security controls. In 
addition, licensees also face challenges In determining which employees 
are suitable for trustworthiness and reliability (T&R) certification to 
mitigate the risk of an insider threat. 

Mobile Sources. The portability of some radiological sources makes 
them susceptible to theft or loss. For example, the most common mobile 
source, iridium-192, is contained inside a small device called a 
radiography camera. The risks associated with mobile sources are 
underscored by a series of Incidents involving both theft and unauthorized 
individuals attempting to gain access to the sources. We also identified 
cases of individuals impersonating state radiological safety and security 
inspectors at remote worksites where the mobile sources were being 
used. 


Regarding the theft of sources, we found, for example, that a radiography 
camera containing about 34 curies of Iridium-1 92 was stolen from a truck 
parked In a hotel parking lot. Although the door to the truck's darkroom 
was locked and the device secured using cables and padlocks, the truck's 
alarm system was not activated. The radiological source was never 
recovered. 

Concerning individuals Impersonating safety and security inspectors, we 
found that a radiography crew was approached at a temporary worksite 
by an individual who identified himself as an inspector. The Individual 
became confrontational with the crew. The radiographers asked the 
individual to provide identification, but he refused and later left the 
worksite. The Individual was identified as having multiple convictions on 
his record, including assault, forgery, and terroristic threats. 

According to NRC officials, the agency’s controls provide licensees with 
flexibility to meet the security requirements. NRC’s security controls call 
for two independent physical measures — such as two separate chains or 
steel cables locked and separately attached to the vehicle — when 
securing a mobile device containing a high-risk source to a truck. The 
controls also call for licensees to maintain constant control and/or 
surveillance during transit, as well as disabling the truck containing such 
devices when not under direct control and constant surveillance by the 
licensee. 
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stationary Sources, Securing stationary high-risk radiological sources 
also poses challenges for licensees. These types of facilities include 
aerospace manufacturing and research plants, storage warehouses, and 
panoramic irradiators used to sterilize industrial products. 

One facility we visited met NRC's security controls but still had potential 
security vulnerabilities. Specifically, at the facility, we observed a cesium- 
137 irradiator with approximately 800 curies that was on wheels and in 
close proximity to a loading dock rollup door that was secured with a 
simple padlock. 

NRC’s security controls for stationary sources provide a general 
framework that is implemented by the licensee. However, the security 
controls are broadly written and do not provide specific direction on the 
use of cameras, alarms, and other relevant physical security measures. 

Insider Threats. Licensees of mobile and stationary radiological sources 
face challenges in determining which of their employees are suitable for 
T&R certification, as required by NRC's security controls. Such 
certification allows for unescorted access to high-risk radiological 
sources. Under NRC’s security controls, it is left to the licensee to decide 
whether to grant employees unescorted access, even in cases where an 
individual has been indicted or convicted for a violent crime or terrorism. 
Moreover, in such cases, the licensee is not required to consult with NRC 
before granting such access. 

We found two cases where employees of industrial radiographers were 
granted unescorted access despite having serious criminal records. In 
one of the cases, a T&R official told us that she granted unescorted 
access to an individual in 2008 with an extensive criminal history, some of 
which was included on the FBI report the company received from NRC, 
and some that was absent. This criminal history included two convictions 
tor terroristic threats that occurred in 1996, which were not included in the 
background information provided to the T&R official by NRC. The NRC 
officials said that the person was convicted not of a threat against the 
United States, but of making violent verbal threats against two individuals. 
Based on available documents, we identified that the individual had been 
arrested and convicted multiple times from 1996 to 2008, including for the 
following: assault, forgery, failure to appear in court, driving while 
intoxicated, driving with a suspended license, and terroristic threats 
(twice). 
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According to NRC officials, identification of a criminal history through the 
FBI or a discretionary local criminal history check does not automatically 
indicate unreliability or untrustworthiness of an individual. The licensee 
may authorize individuals with criminal records for unescorted access to 
radioactive materials notwithstanding the individual's criminal history. 

Nonetheless, in the report being released today, we recommended that 
NRC assess the T&R process to determine if it provides reasonable 
assurance against insider threats. NRC acknowledged the merits of our 
recommendation and is planning to reevaluate this issue as part of its 
review of the effectiveness of the recently issued security regulations 
under 10 C.F.R. Part 37. This review is expected to occur 1 to 2 years 
after the regulations are implemented. As we noted in our report, we 
believe that this review should be conducted with a greater sense of 
urgency. 


Federal Agencies Are 
Taking Steps to Improve 
Security of Radiological 
Sources but Are Not 
Always Effectively 
Collaborating 


Federal agencies are taking steps to better secure industrial radiological 
sources. For example. NRC has been developing a Best Practices Guide 
and NNSA has two initiatives to improve industrial radiological source 
security. However, NRC. NNSA, and DHS— agencies that play a role in 
nuclear and radiological security — are not always effectively collaborating 
to achieve the common mission of securing mobile industrial sources. 

Best Practices Guide. At the time of our review, NRC was developing a 
Best Practices Guide for licensees of high-risk radiological sources in 
response to a recommendation in our September 2012 report.'' According 
to NRC officials, the guide includes information for licensees on physical 
barriers; locks; monitoring systems, such as cameras and alarms; as well 
as examples of how to secure mobile sources and sources in transit. 

NRC told us that during development of the Best Practices Guide they 
relied on a working group to provide insight into challenges licensees face 
in complying with NRC's security controls. However, NRC also told us 
that they had not directly reached out to licensees during the 
development of the guide to obtain the views of key stakeholders.® 


'GAO-12-925. 

•GAO-14-293. 
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We recommended in our report that NRC obtain the views of key 
stakeholders and licensees during the development of the Best Practices 
Guide. NRC agreed with our recommendation. 

NNSA Efforts to Address Security Risks. NNSA has two initiatives 
under way to address security risks posed by industrial radiological 
sources: (1) testing and developing tracking technology for mobile 
sources, and (2) upgrading the physical security of industrial facilities. 

Agencies Not Always Collaborating Effectively. Although DHS, NNSA, 
and NRC have an interagency mechanism for collaborating on, among 
other things, radiological security, they were not always doing so 
effectively. For example, we found that DHS contracted with Sandia 
National Laboratories in October 201 1 to study commercially available 
technologies for tracking mobile radiological sources. DHS collaborated 
with NRC and several Department of Energy national laboratories to 
develop the study but did not share the results with key NNSA officials 
who are directly involved in radiological source security. NNSA Is also 
developing a tracking system for devices containing mobile radiological 
sources, such as radiography cameras. However, we found that NNSA 
has not been collaborating with DHS and NRC on the project. 

We also recommended that NNSA, NRC, and DHS review their 
collaboration mechanism for opportunities to enhance it, especially In the 
development of new technologies. NRC and NNSA agreed with this 
recommendation, and DHS had no comments on our report. 


Chairman Carper, Ranking Member Dr, Coburn, and Members of the 
Committee, this concludes my prepared statement, I would be pleased to 
answer any questions that you may have at this time. 
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